Custom Post Carousels with Owl
Custom Post Carousels with Owl has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 4.9, and the most serious one scores 5.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).
Every one of the 2 issues recorded for Custom Post Carousels with Owl has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Custom Post Carousels with Owl is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2025-5125Custom Post Carousels with Owl <= 1.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Custom Post Carousels with Owl
Author
thehowarde
This plugin uses the Owl-Carousel-2 jQuery plugin to create carousels (sliders) from any built in or (public) custom post type in WordPress. You can use this plugin to make: Image Carousel from Media Library Product Carousels (Choose WooCommerce Products) Featured Product Carousels Carousels from Posts or Products by ID Taxonomy (Category/Tag) Carousels Carousel from Any Custom Post Type Latest Posts WooCommerce Reviews More Easy to use controls allow for customization of each carousel with options to show or hide Titles, Featured Image, Call to Action buttons (links) and more. This plugin is simple and without on screen nags, promotions or upsells. Please note. There is not a lot of stylesheet attached to the layout. If you don’t have basic skills, this might not be the plugin for you.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C