Bplugins Carousel Block – Responsive Image And Content Carousel vulnerabilities

1 vulnerability

Known vulnerabilities in Bplugins Carousel Block – Responsive Image And Content Carousel, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.4CVE-2025-12388bpluginscarousel block – responsive image and content carousel+1
EPSS score
0.23%
The B Carousel Block – Responsive Image and Content Carousel plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.1.5. This is due to the plugin not validating user-supplied URLs before passing them to the wp_remote_request() function. This makes it possible for authenticated attackers, with subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.