CVE-2021-24739: Shapedplugin Logo Carousel

High severity, CVSS 8.1. EPSS: 1% chance of exploitation in the next 30 days.

The Logo Carousel WordPress plugin before 3.4.2 allows users with a role as low as Contributor to duplicate and view arbitrary private posts made by other users via the Carousel Duplication feature

Affected products

• Shapedplugin Logo Carousel: before 3.4.2 (fixed in 3.4.2)

Published 2021-12-21. Last modified 2026-06-17.