Custom links in Elementor Image Carousel

Custom links in Elementor Image Carousel has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Custom links in Elementor Image Carousel has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by Ananda Dhakal. Custom links in Elementor Image Carousel is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.1.12.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Custom links in Elementor Image Carousel vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2026-65534

Custom links in Elementor Image Carousel <= 1.1.1 - Authenticated (Author+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2026-07-23 00:00	Custom links in Elementor Image Carousel <= 1.1.1 - Authenticated (Author+) Stored Cross-Site Scripting Custom links in Elementor Image Carousel <= 1.1.1	`CVE-2026-65534`	6.4 Medium	Ananda Dhakal	No

Showing 1–1 of 1 reports

Latestv1.1.1

Custom links in Elementor Image Carousel

Author

Charlie Etienne

4.7(25)

94/100

Last Updated

2022-11-09 (4y ago)

Active Installs

5,000+

Downloads

22,845

Requires WP

5.2+

Requires PHP

7.2+

Tested up to

WP 6.1.12

Created

2021-12-03 (5y ago)

There is a WordPress limitation (no custom link on images) that makes impossible to add custom links on each image in an image carousel or image gallery like the one in Elementor free version. This plugin just overrides WordPress attachment fields and Elementor Image Carousel widget to let you add custom links to each image in the carousel. Basically, it adds two custom fields to each image in WordPress Media Library (Custom link and “Open in new tab?” checkbox). Then it hooks into elementor image carousel widget just before it’s rendered on frontend. Usage & Documentation No options, no premium version, no bullshit. Just activate or deactivate. Note: You have to enable the option “Link” in the Elementor Image Carousel widget and set it to: “Media Files” in order for it to work. Resources WordPress Plugin: https://wordpress.org/plugins/custom-links-in-elementor-image-carousel GitHub Repository: https://github.com/CharlieEtienne/custom-links-in-elementor-image-carousel Support: https://github.com/CharlieEtienne/custom-links-in-elementor-image-carousel/issues

View on WordPress.org