Input validation vulnerability in Wp photo text slider 50 8.0

The Wp Photo Text Slider 50 plugin for WordPress, up to version 8.0, has a security flaw which makes it vulnerable to a type of attack called SQL Injection. This type of attack is possible because the plugin’s shortcode does not escape user-supplied parameters properly, and the existing SQL query is not prepared correctly. People with subscriber-level or higher user permissions can take advantage of this flaw and add additional SQL queries to the existing ones, potentially allowing them to access sensitive information from the database.