Product Carousel Slider & Grid Ultimate for WooCommerce vulnerabilities

Plugin slug woo-product-carousel-slider-and-grid-ultimate · 7 known vulnerabilities · latest disclosed 2025-01-24 · WordPress.org page

Every listed vulnerability has a fix. Version 1.10.1 or later is not affected by any of them. If your site runs an older version, update it.

3 of 7 rated high or critical (CVSS 7 or more).

Known vulnerabilities in Product Carousel Slider & Grid Ultimate for WooCommerce

SeverityAffected versionsFixed inCVEPublishedDetails
Medium 4.4<= 1.10.01.10.1CVE-2025-246812025-01-24Advisory
High 8.8<= 1.9.101.10.0CVE-2024-120402024-12-11Advisory
High 8.8<= 1.9.101.10.0CVE-2024-440482024-09-16Advisory
High 7.5<= 1.9.71.9.8CVE-2024-19502024-03-05Advisory
Medium 4.3<= 1.9.31.9.4none2022-12-16Advisory
Medium 4.3<= 1.9.31.9.4CVE-2022-471502022-12-14Advisory
Medium 6.4<= 1.8.61.8.7none2022-08-05Advisory

Check if a site is affected

Enter a site address to see which version of Product Carousel Slider & Grid Ultimate for WooCommerce and other plugins it runs, and whether they match a known vulnerability.

Questions

Is the Product Carousel Slider & Grid Ultimate for WooCommerce plugin safe to use?

All 7 known issues are fixed in current versions (1.10.1 or later). Keeping it updated is what matters.

How do I check which version of Product Carousel Slider & Grid Ultimate for WooCommerce my site runs?

In WordPress go to Plugins > Installed Plugins. From the outside, the free PluginPeek scan below reads the version from the site's public files.

How do I fix a vulnerable plugin?

Make a full backup, then update it from Dashboard > Updates and check the site afterwards. If you would rather not, we can do it for a fixed $99, paid after you have checked the site.

Check any WordPress site in one click while you browse: Add PluginPeek to Chrome