WP Google Review Slider < 11.8 - Subscriber+ SQLi

CVE-2023-0259

Summary

The WP Google Review Slider plugin for WordPress prior to version 11.8 is susceptible to SQL injection due to improper sanitization and escaping of user input in SQL statements. This vulnerability allows users with low-level roles, such as subscribers, to exploit the issue, potentially leading to unauthorized database access and manipulation. It emphasizes the need for prompt updates and security practices to mitigate risks associated with user inputs in web applications.

References