Input validation vulnerability in Horizontal scrolling announcement 9.2

The Horizontal scrolling announcement plugin for WordPress is vulnerable to a type of cyber attack known as a “SQL Injection” when used in versions up to and including 9.2. This attack can allow an attacker with user permissions equal to or higher than a “subscriber” to access sensitive information from the website’s database. The vulnerability is caused by a lack of escaping on user supplied parameters and insufficient preparation of existing SQL queries.