SQL Injection Vulnerability in Easy Testimonial Slider and Form Plugin for WordPress
CVE-2015-10147
4.9MEDIUM
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 29 October 2025
What is CVE-2015-10147?
The Easy Testimonial Slider and Form plugin for WordPress, up to version 1.0.2, is susceptible to SQL Injection due to improper escaping of user-supplied input in the 'id' parameter. This vulnerability can be exploited by authenticated attackers with Administrator access or higher, allowing them to craft malicious SQL queries that can extract sensitive information from the database, potentially leading to unauthorized data exposure.
Affected Version(s)
Easy Testimonial Slider and Form * <= 1.0.2