SQL Injection Vulnerability in Team Circle Image Slider Plugin for WordPress

CVE-2019-25223

What is CVE-2019-25223?

The Team Circle Image Slider with Lightbox plugin for WordPress is susceptible to SQL Injection due to insufficient parameter escaping and lack of proper query preparation on user-supplied input. This vulnerability allows authenticated users with Administrator privileges to inject malicious SQL commands into existing queries, potentially leading to unauthorized access to sensitive database information. Site administrators should ensure that their installations are updated to the latest versions to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References