Threat Database

Threat Entry Updated 2026-06-17

Owl Carousel - Broken Access Control (CVE-2022-44578)

Missing Authorization vulnerability in Pierre JEHAN Owl Carousel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Owl Carousel: from n/a through 0.5.3.

PLUGIN Owl Carousel

CVE-2022-44578

MEDIUM CVSS 5.3 2024-12-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Owl Carousel - Cross-Site Scripting (XSS) (CVE-2024-24801)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LogicHunt OWL Carousel – WordPress Owl Carousel Slider allows Stored XSS.This issue affects OWL Carousel – WordPress Owl Carousel Slider: from n/a through 1.4.0.

PLUGIN Owl Carousel

CVE-2024-24801

MEDIUM CVSS 6.5 2024-02-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Owl Carousel - Cross-Site Scripting (XSS) (CVE-2023-23829)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pierre JEHAN Owl Carousel plugin

PLUGIN Owl Carousel

CVE-2023-23829

MEDIUM CVSS 6.5 2023-08-08

Risk Score

Open Full Technical Breakdown