Malicious Package

Overview tinkoff-pfp-atom-desktop-carousel is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

CVE-2026-65534

Author Cross Site Scripting XSS in Custom links in Elementor Image Carousel = 1.1.1 versions...

CVE-2026-65534

Author Cross Site Scripting XSS in Custom links in Elementor Image Carousel = 1.1.1 versions...

CVE-2026-65534 WordPress Custom links in Elementor Image Carousel plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting XSS in Custom links in Elementor Image Carousel = 1.1.1 versions...

CVE-2026-65534 WordPress Custom links in Elementor Image Carousel plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting XSS in Custom links in Elementor Image Carousel = 1.1.1 versions...

EUVD-2026-48135

Author Cross Site Scripting XSS in Custom links in Elementor Image Carousel = 1.1.1 versions...

CVE-2026-65534

CVE-2026-65534 concerns the WordPress plugin "Custom links in Elementor Image Carousel" (versions

WordPress Custom links in Elementor Image Carousel plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Custom links in Elementor Image Carousel versions = 1.1.1...

CVE-2026-65534: Improper Neutralization of Input During Web Page Generation

Author Cross Site Scripting XSS in Custom links in Elementor Image Carousel = 1.1.1 versions...

PT-2026-63945

Author Cross Site Scripting XSS in Custom links in Elementor Image Carousel = 1.1.1 versions...

CVE-2026-13247: Improper Neutralization of Input During Web Page Generation

The Logo Slider – Logo Carousel, Client Logo Slider & Brand Showcase for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lgxtooltipposition' parameter in all versions up to, and including, 5.5 due to insufficient input sanitization and output escaping. This...

EUVD-2025-210360

Contributor Cross Site Scripting XSS in Image Carousel = 1.0.0.41 versions...

CVE-2025-68074

Contributor Cross Site Scripting XSS in Image Carousel = 1.0.0.41 versions...

CVE-2025-68074

CVE-2025-68074 is a documented Cross-Site Scripting (XSS) vulnerability affecting the WordPress Image Carousel plugin versions

CVE-2025-68074 WordPress Image Carousel plugin <= 1.0.0.41 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Image Carousel = 1.0.0.41 versions...

CVE-2025-68074 WordPress Image Carousel plugin <= 1.0.0.41 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Image Carousel = 1.0.0.41 versions...

WordPress Image Carousel plugin <= 1.0.0.41 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Image Carousel versions = 1.0.0.41...

CVE-2025-68074: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Image Carousel = 1.0.0.41 versions...

PT-2026-52718

Name of the Vulnerable Software and Affected Versions Image Carousel versions prior to 1.0.0.42 Description Cross Site Scripting XSS exists in the Contributor role, allowing an attacker to execute malicious scripts in the browser of other users. Recommendations Update Image Carousel to a version...

Malicious Package

Overview carousel-controller-mixin is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...