WP Slick Slider and Image Carousel Security & Risk Analysis

wordpress.org/plugins/wp-slick-slider-and-image-carousel

A quick, easy way to add and display multiple WP Slick Slider and carousel using a shortcode. Also added Gutenberg block support.

10K active installs v3.7.8 PHP + WP 4.0+ Updated Feb 20, 2026
carousel-sliderresponsive-header-image-sliderresponsive-sliderslick-image-sliderwp-header-image-slider
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WP Slick Slider and Image Carousel Safe to Use in 2026?

Generally Safe

Score 100/100

WP Slick Slider and Image Carousel has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The wp-slick-slider-and-image-carousel plugin, version 3.7.8, exhibits a generally good security posture, with a strong emphasis on secure coding practices. The absence of known CVEs, critical taint flows, raw SQL queries, and a very high percentage of properly escaped output are significant strengths. The plugin also demonstrates a good use of nonces and capability checks, contributing to a robust defense against common web attacks. However, the presence of the `unserialize` function is a notable concern. If user-supplied data is ever directly unserialized without strict validation, it could lead to object injection vulnerabilities. While the static analysis did not reveal any immediate exploit paths for this function, it represents a potential blind spot. The plugin's vulnerability history being completely clear is a positive indicator, suggesting a consistent effort towards security. Overall, this plugin appears to be well-maintained and largely secure, with the `unserialize` function being the primary area requiring further scrutiny and potential mitigation if user-controlled data is involved.

Key Concerns

  • Dangerous function unserialize found
Vulnerabilities
None known

WP Slick Slider and Image Carousel Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

WP Slick Slider and Image Carousel Code Analysis

Dangerous Functions
1
Raw SQL Queries
0
0 prepared
Unescaped Output
7
294 escaped
Nonce Checks
6
Capability Checks
2
File Operations
1
External Requests
1
Bundled Libraries
0

Dangerous Functions Found

unserialize$info = @unserialize($data);wpos-analytics\includes\class-anylc-admin.php:696

Output Escaping

98% escaped301 total outputs
Data Flows
All sanitized

Data Flow Analysis

1 flows
<solutions-features> (includes\admin\settings\solution-features\solutions-features.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

WP Slick Slider and Image Carousel Attack Surface

Entry Points2
Unprotected0

Shortcodes 2

[slick-carousel-slider] includes\shortcodes\wpsisac-carousel.php:175
[slick-slider] includes\shortcodes\wpsisac-slider.php:171
WordPress Hooks 28
actionadmin_menuincludes\admin\class-wpsisac-admin.php:20
actionadmin_initincludes\admin\class-wpsisac-admin.php:23
actionadd_meta_boxesincludes\admin\class-wpsisac-admin.php:26
filterwpsisac_slider-category_row_actionsincludes\admin\class-wpsisac-admin.php:32
actioninitincludes\admin\supports\blocks\gutenberg-block.php:43
actionenqueue_block_editor_assetsincludes\admin\supports\blocks\gutenberg-block.php:60
filterblock_categories_allincludes\admin\supports\blocks\gutenberg-block.php:82
actionadmin_enqueue_scriptsincludes\class-wpsisac-script.php:20
actionwp_enqueue_scriptsincludes\class-wpsisac-script.php:23
actioninitincludes\wpsisac-post-types.php:59
actioninitincludes\wpsisac-post-types.php:96
actionplugins_loadedwp-slick-image-slider.php:85
actionupdate_option_active_pluginswp-slick-image-slider.php:120
actionadmin_noticeswp-slick-image-slider.php:181
actionadmin_menuwpos-analytics\includes\class-anylc-admin.php:45
actionadmin_menuwpos-analytics\includes\class-anylc-admin.php:48
actionadmin_initwpos-analytics\includes\class-anylc-admin.php:51
actionadmin_noticeswpos-analytics\includes\class-anylc-admin.php:54
actionadmin_footerwpos-analytics\includes\class-anylc-admin.php:57
actionwp_loadedwpos-analytics\includes\class-anylc-admin.php:60
actioninitwpos-analytics\includes\class-anylc-admin.php:63
filtercron_scheduleswpos-analytics\includes\class-anylc-admin.php:66
actionwpos_monthly_cron_hookwpos-analytics\includes\class-anylc-admin.php:69
actionrest_api_initwpos-analytics\includes\class-anylc-admin.php:72
filterrest_pre_serve_requestwpos-analytics\includes\class-anylc-admin.php:585
actionadmin_enqueue_scriptswpos-analytics\includes\class-anylc-script.php:20
actionactivated_pluginwpos-analytics\wpos-analytics.php:244
actionplugins_loadedwpos-analytics\wpos-analytics.php:258

Scheduled Events 1

wpos_monthly_cron_hook
Maintenance & Trust

WP Slick Slider and Image Carousel Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 20, 2026
PHP min version
Downloads665K

Community Trust

Rating80/100
Number of ratings70
Active installs10K
Developer Profile

WP Slick Slider and Image Carousel Developer Profile

Essential Plugin

33 plugins · 205K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
219 days
View full developer profile
Detection Fingerprints

How We Detect WP Slick Slider and Image Carousel

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wp-slick-slider-and-image-carousel/assets/css/slick.css/wp-content/plugins/wp-slick-slider-and-image-carousel/assets/css/slick-theme.css/wp-content/plugins/wp-slick-slider-and-image-carousel/assets/css/slick-slider-admin.css/wp-content/plugins/wp-slick-slider-and-image-carousel/assets/css/magnific-popup.css/wp-content/plugins/wp-slick-slider-and-image-carousel/assets/js/slick.min.js/wp-content/plugins/wp-slick-slider-and-image-carousel/assets/js/magnific-popup.js/wp-content/plugins/wp-slick-slider-and-image-carousel/assets/js/slick-slider-admin.js/wp-content/plugins/wp-slick-slider-and-image-carousel/assets/js/slick-slider-public.js+1 more
Script Paths
/wp-content/plugins/wp-slick-slider-and-image-carousel/assets/js/slick.min.js/wp-content/plugins/wp-slick-slider-and-image-carousel/assets/js/magnific-popup.js/wp-content/plugins/wp-slick-slider-and-image-carousel/assets/js/slick-slider-admin.js/wp-content/plugins/wp-slick-slider-and-image-carousel/assets/js/slick-slider-public.js/wp-content/plugins/wp-slick-slider-and-image-carousel/assets/js/slick-slider-gutenberg.js
Version Parameters
wp-slick-slider-and-image-carousel/assets/css/slick.css?ver=wp-slick-slider-and-image-carousel/assets/css/slick-theme.css?ver=wp-slick-slider-and-image-carousel/assets/css/slick-slider-admin.css?ver=wp-slick-slider-and-image-carousel/assets/css/magnific-popup.css?ver=wp-slick-slider-and-image-carousel/assets/js/slick.min.js?ver=wp-slick-slider-and-image-carousel/assets/js/magnific-popup.js?ver=wp-slick-slider-and-image-carousel/assets/js/slick-slider-admin.js?ver=wp-slick-slider-and-image-carousel/assets/js/slick-slider-public.js?ver=wp-slick-slider-and-image-carousel/assets/js/slick-slider-gutenberg.js?ver=

HTML / DOM Fingerprints

CSS Classes
wpsisac-slider-wrapperwpsisac-slick-sliderwpsisac-slick-carousel-wrapperwpsisac-slick-carouselwpsisac-slider-infinitewpsisac-slider-dotswpsisac-slider-arrowswpsisac-slider-dots-container+2 more
Data Attributes
data-slick-slide-todata-slick-current-slide
JS Globals
wpsisac_data
Shortcode Output
[slickgrids][wp_slick_slider][wp_slick_carousel]
FAQ

Frequently Asked Questions about WP Slick Slider and Image Carousel