Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Howard Ehrenberg Component: Custom Post Carousels With Owl Clear all filters
TI-2025-04594 CVE-2025-5125 · GHSA-f6jx-7qrr-8hv7

Custom Post Carousels with Owl < 1.4.12 - Contributor+ Stored XSS

Priority MEDIUM 55

The Custom Post Carousels with Owl WordPress plugin before 1.4.12 uses the featherlight library and makes use of the data-featherlight attribute without sanitizing before using it.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00247 Published 2025-06-20 Fixed in 1.4.12 CWE-79
TI-2023-28145 CVE-2023-51493 · GHSA-qj6m-6wr4-jg9x

WordPress Custom Post Carousels with Owl Plugin <= 1.4.6 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Howard Ehrenberg Custom Post Carousels with Owl allows Stored XSS.This issue affects Custom Post Carousels with Owl: f…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00328 Published 2024-02-10 No fix listed CWE-79