← WordPress Vulnerabilities
WordPress security by component

B Carousel Block – Responsive Image and Content Carousel

B Carousel Block – Responsive Image and Content Carousel is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Nov 05, 2025; the highest CVE/CNA score is 6.4.

Plugin slug: b-carousel-block-responsive-image-and-content-carousel

CVE-2025-12388: B Carousel Block – Responsive Image and Content Carousel: Server-side request forgery

B Carousel Block – Responsive Image and Content Carousel is affected by server-side request forgery. Exploitation requires at least subscriber-level access. The vulnerable server can be induced to make attacker-selected network requests.

PublishedNov 05, 2025
Safe version guidanceSee mitigation notes
Safe version
Nov 05, 2025 CVE-2025-12388
B Carousel Block – Responsive Image and Content Carousel: Server-side request forgery
B Carousel Block – Responsive Image and Content Carousel is affected by server-side request forgery. Exploitation requires at least subscriber-level access. The vulnerable server can be induced to make attacker-selected network requests.
See mitigation notes
CVE6.4
NVDPending