WordPress Thumbnail Carousel Slider SQL Injection Vulnerability
Vulnerability
A SQL injection vulnerability has been identified in the Thumbnail Carousel Slider plugin for WordPress, affecting all versions through 1.0.4. The issue arises from inadequate escaping of user-supplied parameters in the 'id' parameter, allowing unauthenticated attackers to inject additional SQL queries. This exploitation could lead to unauthorized access to sensitive information within the database.
Impact
Exploitation of this vulnerability allows for SQL injection, where attackers can manipulate database queries to extract sensitive information from the database.
Remediation
Users are advised to update the Thumbnail Carousel Slider plugin to version 1.0.5 or a newer patched version.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.