Input validation vulnerability in Wp anything slider 9.1

The Wp anything slider plugin for WordPress is vulnerable to a type of attack known as SQL Injection. This affects versions of the plugin up to and including version 9.1. The vulnerability exists because the plugin does not properly escape data supplied by a user, and does not properly prepare existing SQL queries. This means that attackers with subscriber-level permissions or higher can add their own SQL queries to existing queries, which could potentially give them access to sensitive information from the database.