SQL Injection Vulnerability in Team Circle Image Slider Plugin for WordPress

CVE-2019-25223

What is CVE-2019-25223?

The Team Circle Image Slider with Lightbox plugin for WordPress is susceptible to SQL Injection due to insufficient parameter escaping and lack of proper query preparation on user-supplied input. This vulnerability allows authenticated users with Administrator privileges to inject malicious SQL commands into existing queries, potentially leading to unauthorized access to sensitive database information. Site administrators should ensure that their installations are updated to the latest versions to mitigate this risk.

References