Product Carousel Slider & Grid Ultimate for WooCommerce vulnerabilities

2 known vulnerabilities in Product Carousel Slider & Grid Ultimate for WooCommerce from wpWax. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Product Carousel Slider & Grid Ultimate for…: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2024-12040Dec 12, 2024wpWax

  The Product Carousel Slider & Grid Ultimate for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9.10 via the 'theme' attribute of the `wcpcsu` shortcode. This makes it possible for authenticated at

• 8.8 High severity

  Product Carousel Slider & Grid Ultimate for…: Deserialization of Untrusted Data

  CVE-2024-1950Mar 13, 2024wpWaxEPSS 1.15%

  The Product Carousel Slider & Grid Ultimate for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.9.7 via deserialization of untrusted input via shortcode. This makes it possible for authenticated at