Security Vulnerability in Responsive Image Slider Plugin Could Lead to SQL Injection

CVE-2024-7150

Summary

The Slider by 10Web – Responsive Image Slider plugin for WordPress is exposed to a time-based SQL Injection vulnerability that affects all versions up to and including 1.2.57. This flaw stems from insufficient escaping of user-supplied parameters within the SQL query. Authenticated attackers with Contributor-level access or higher can exploit this vulnerability, allowing them to inject additional SQL queries into existing ones. Such an attack could lead to the unauthorized extraction of sensitive information from the database, posing significant risks to the integrity and confidentiality of the data stored.

References