CVE-2024-13627

4.7 mediumEPSS 0.8%

Medium (4.7) in wp-buy owl carousel slider. EPSS 0.8% chance of exploitation in the next 30 days.

The OWL Carousel Slider WordPress plugin through 2.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Severity

CVSS 3.1

4.7 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2025-02-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wp-buy:owl_carousel_slider

References

https://wpscan.com/vulnerability/f7e425a1-ae49-4ea6-abe4-42ba2713af8f/

Check your stack JSON