WordPress plugin
CCI Posts Carousel All In One security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 5 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium4
- Low0
All CCI Posts Carousel All In One vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Authenticated (Contributor+) PHP Object Injection ≤1.3.12Update to 1.3.13 | CVE-2025-39358 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.3.10Update to 1.3.11 | CVE-2025-39573 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.3.8Update to 1.3.9 | CVE-2025-31094 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.3.7Update to 1.3.8 | CVE-2025-30920 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via auto_play_timeout Parameter ≤1.3.7Update to 1.3.8 | CVE-2025-1491 |
- High8.8Authenticated (Contributor+) PHP Object Injection
≤1.3.12Update to 1.3.13
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.3.10Update to 1.3.11
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.3.8Update to 1.3.9
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.3.7Update to 1.3.8
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via auto_play_timeout Parameter
≤1.3.7Update to 1.3.8
CCI Posts Carousel All In One: common questions
Does CCI Posts Carousel All In One have known vulnerabilities?
Yes. VulnCrest Radar lists 5 known vulnerabilities in CCI Posts Carousel All In One: 1 high, 4 medium. None are known to affect version null.
How do I check which version of CCI Posts Carousel All In One I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent CCI Posts Carousel All In One vulnerability?
CVE-2025-39358, published May 29, 2025: WP Posts Carousel <= 1.3.12 - Authenticated (Contributor+) PHP Object Injection. Severity: High (CVSS 8.8).
Is any CCI Posts Carousel All In One vulnerability listed in CISA KEV?
No. None of the known CCI Posts Carousel All In One vulnerabilities is currently listed in the CISA KEV catalog.