Log out
Get PRO

Latest

Input validation vulnerability in wp image slideshow 12.0

  • Severity: high-risk
  • Status: Fixed
  • Publication: October 30, 2023

The WordPress image slideshow plugin is vulnerable to a type of attack called SQL Injection in versions up to 12.0. This attack can be done by an authenticated user with subscriber-level or higher permissions. The attack works by adding extra SQL queries to existing queries, which can be used to access sensitive information from the database. This is possible because the plugin does not properly escape user-supplied parameters and does not prepare existing SQL queries properly.

Detected in:

wp image slideshow fixed vulnerable versions: >= * <= 12.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.