Simple Logo Carousel

Simple Logo Carousel has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Simple Logo Carousel has a vendor fix available, so running the current release closes it.

All of these findings were reported by Peter Thaleikis. Simple Logo Carousel is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Simple Logo Carousel vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-5700

Simple Logo Carousel <= 1.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

Read the full analysis

Vulnerability Records

1 records


2025-06-16 21:35	Simple Logo Carousel <= 1.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter Simple Logo Carousel <= 1.9.3	`CVE-2025-5700`	6.4 Medium	Peter Thaleikis	Yes

Showing 1–1 of 1 reports

Plugin Profile

Latestv1.9.6

Simple Logo Carousel

Author

Tony V. Le

4.0(4)

80/100

Last Updated

2026-08-28 (16d ago)

Active Installs

100+

Downloads

5,213

Requires WP

5.0+

Requires PHP

8.0+

Tested up to

WP 6.9.7

Created

2018-12-30 (8y ago)

Simple Logo Carousel is a free WordPress plugin powered by slick. The plugin helps you create and manage logos that can be rearranged into carousels to be displayed anywhere on your site. Features Powered by slick. Easily upload and manage logos. Link logos to an internal or external link. Categorize logos for different carousels. Display carousels anywhere on your site via a shortcode. Randomize logo order on each page load.

View on WordPress.org