Critical · 9.3 CVE-2025-22553 EUVD-2025-2831GHSA-p9vv-hm69-8j9v

WordPress Multiple Carousel Plugin <= 2.0 - SQL Injection vulnerability

Published Jan 21, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: dhananjaysingh Product: Multiple Carousel

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in dhananjaysingh Multiple Carousel multicarousel allows SQL Injection.This issue affects Multiple Carousel: from n/a through <= 2.0.

Affected products

Vendor	Product	Affected	Fixed
dhananjaysingh	Multiple Carousel	≤ 2.0	—

References

https://patchstack.com/database/Wordpress/Plugin/multicarousel/vulnerability/wordpress-multiple-carousel-plugin-2-0-sql-injection-vulnerability?_s_id=cve vdb-entry