Input validation vulnerability in Hero Slider – WordPress Slider Plugin 1.3.5

The Hero Slider is a plugin for WordPress that allows users to add a slider to their website. However, it has a security vulnerability that allows attackers to access sensitive information from the database. This vulnerability affects all versions of the plugin up to 1.3.5 and is due to a lack of proper protection on user input and SQL queries. This means that even users with Subscriber-level access or higher can add malicious code to existing queries and potentially access confidential data.