Carousel, Recent Post Slider and Banner Slider vulnerabilities

Product

Carousel, Recent Post Slider and Banner Slider

by spicethemes · last CVE May 1, 2026

CVEs

On KEV

6.1

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 2Low 0

Severity

Exploitation

Watch

Add Carousel, Recent Post Slider and Banner Slider to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-13362	6.1	0%	May 1	Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter Affected: through 2.1
CVE-2023-5362	5.4	1%	Oct 30	The Carousel, Recent Post Slider and Banner Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'spice_post_slider' shortcode in versions up to, and… Affected: before 2.1