Aller au contenu
Se connecter
8.8 Élevée

CVE-2023-0260 The WP Review Slider WordPress plugin before 12.2 does not properly sanitise and escape a parameter before using it in a…

Description

The WP Review Slider WordPress plugin before 12.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.

Produits et versions touchés

Produit Versions touchées Corrigé en
WP Review Slider 12.2 premières → < 12.2 12.2

Autres CVE de WP Review Slider

Les 3 CVE de WP Review Slider →
CVE-2023-6456 The WP Review Slider WordPress plugin before 13.0 does not sanitise and escape some of its settings, which could allow… 4.8 Moyenne CVE-2022-0383 The WP Review Slider WordPress plugin before 11.0 does not sanitise and escape the pid parameter when copying a… Non notée
Suivre cette CVE