Skip to content
Sign in
8.8 High

CVE-2023-0260 The WP Review Slider WordPress plugin before 12.2 does not properly sanitise and escape a parameter before using it in a…

Description

The WP Review Slider WordPress plugin before 12.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.

Affected products and versions

Product Affected versions Fixed in
WP Review Slider 12.2 earliest → < 12.2 12.2

Other CVEs of WP Review Slider

The 3 CVEs of WP Review Slider →
CVE-2023-6456 The WP Review Slider WordPress plugin before 13.0 does not sanitise and escape some of its settings, which could allow… 4.8 Medium CVE-2022-0383 The WP Review Slider WordPress plugin before 11.0 does not sanitise and escape the pid parameter when copying a… Not rated
Track this CVE