Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 80% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

Recent releases and news for this plugin

1. — Version 2.7.12 Improved: The recommended plugins section now uses the plugins_api function for more reliable data. Improved: Hardened plugin security with proper capability checks. Fix: The undefined warning, which was rarely found. Te 2.7.12
2. — Version 2.7.11 Improved: The plugin security has been improved. Fix: Resolved styling issues in certain options with WordPress 7.0. Tested: WordPress 7.0 compatibility. Tested: WooCommerce 10.7.0 compatibility. 2.7.11
3. — Version 2.7.10 Improved: Code readability and maintainability improved. Tested: WooCommerce 10.4.3 compatibility. 2.7.10
4. — Version 2.7.9 Fix: The undefined constant issue was found along with the pro version. Tested: WooCommerce 10.3.5 compatibility. 2.7.9
5. — Version 2.7.8 Tested: WordPress 6.9 compatibility. 2.7.8
6. — Version 2.7.7 New: Carousel Source type: Pages option added. New: The option to show featured products has been added. New: Unlimited YouTube videos option added. New: The Slider Navigation: Top Right option. New: The Slider Paginatio 2.7.7

7 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.4 WP Carousel Free <= 2.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-caption' Attribute ↗
   2026-05-04 CVE-2026-4665 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.7.10 Patched in 2.7.11
2. Medium · 4.4 Carousel, Slider, Gallery by WP Carousel <= 2.7.3 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2025-01-31 CVE-2024-13314 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.7.3 Patched in 2.7.4
3. Medium · 6.4 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library ↗
   2024-12-03 CVE-2024-5020 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.6.8 Patched in 2.6.9
4. Medium · 4.4 Carousel, Slider, Gallery by WP Carousel <= 2.6.8 - Authenticated (Editor+) Stored Cross-Site Scripting ↗
   2024-10-30 CVE-2024-4002 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.6.8 Patched in 2.6.9
5. High · 7.2 Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Admin+) PHP Object Injection ↗
   2024-04-09 CVE-2024-3020 Deserialization of Untrusted Data Affects <= 2.6.3 Patched in 2.6.4
6. Medium · 6.4 Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sp_wp_carousel_shortcode' ↗
   2024-04-05 CVE-2024-2949 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.6.3 Patched in 2.6.4
7. Medium · 6.4 Carousel, Slider, Gallery by WP Carousel <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2022-12-22 CVE-2022-4482 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.5.2 Patched in 2.5.3

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 9 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-04-04 60K+ → 70K+ up after 523 days in tier
2. 2023-10-29 50K+ → 60K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Slick Slider 2K+ installs · 4.1★ · 4 shared tags B
• Smart Slider 3 800K+ installs · 4.8★ · 3 shared tags A
• Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider 500K+ installs · 4.6★ · 3 shared tags A
• Slider by Soliloquy – Responsive Image Slider for WordPress 30K+ installs · 4.7★ · 3 shared tags A
• Image Slider 4K+ installs · 3.6★ · 3 shared tags B
• Media Slider for Photos Images Videos 2K+ installs · 4.5★ · 3 shared tags A

Embed this report card

Drop a live Pulse card for Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel into a readme, a review or a deck. It updates itself.

Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel: 70K+ active installs, 4.7★ (432 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/wp-carousel-free