SQL Injection Vulnerability in Jquery News Ticker Plugin for WordPress

CVE-2023-5430

What is CVE-2023-5430?

The Jquery News Ticker Plugin for WordPress is susceptible to an SQL Injection flaw due to inadequate escaping of user-supplied parameters and unsound SQL query preparation. This vulnerability allows authenticated users with subscriber-level and higher permissions to manipulate existing SQL queries. Attackers could use this weakness to execute additional SQL commands, potentially leading to unauthorized access to sensitive database information.

References