Medium 6.4
2026-05-05< 2.7.11
CVE-2026-4665
Minimum safe version
2.7.11
Update to 2.7.11 or later to address 7 fixable vulnerabilities
CVE-2026-4665
Carousel, Slider, Gallery by WP Carousel <= 2.6.8 - Authenticated (Editor+) Stored Cross-Site Scripting
CVE-2024-13314
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
CVE-2024-3020
CVE-2024-2949
CVE-2022-4482