Vulnerabilities / WP Posts Carousel
WP Posts Carousel vulnerabilities
Advisories WPSec published for CCI Posts Carousel All In One. Other sources may list more. Its attack surface: WP Posts Carousel on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-23 | WPSEC-2026-1568 | WP Posts Carousel <= 2.1.0 - Cross-Site Request Forgery to Carousel and Settings Modification | Medium 5.4 | 2.1.1 |
| 2026-10-23 | WPSEC-2026-1567 | WP Posts Carousel <= 2.1.0 - Unauthenticated Sensitive Information Exposure via Public Carousel REST Endpoint | Low 3.7 | 2.1.1 |
License: CC BY 4.0