The WP Carousel plugin for WordPress, which is used for creating image carousels, galleries, and sliders, has a security vulnerability that could allow attackers with administrator-level access to inject harmful web scripts into pages. This could affect multi-site installations and installations where certain security measures have been disabled.