Carousel, Slider, Gallery by WP Carousel

Authenticated (Editor+) Stored CrossSite Scripting vulnerability <= 2.6.8

Admin+ Stored XSS vulnerability < 2.7.4

Authenticated (Contributor+) Stored DOMBased CrossSite Scripting via FancyBox JavaScript Library <= 2.6.8

Admin+ PHP Object Injection vulnerability <= 2.6.3

Authenticated (Contributor+) Stored CrossSite Scripting via 'sp_wp_carousel_shortcode' vulnerability <= 2.6.3