Owl Carousel Responsive WordPress Plugin SQL Injection Vulnerability

A time-based SQL injection vulnerability has been identified in the Owl Carousel Responsive plugin for WordPress, affecting all versions through 1.9. The issue arises from inadequate escaping of user-supplied data in the 'id' parameter, allowing authenticated attackers with Contributor-level access or higher to inject additional SQL queries. This exploitation could lead to the extraction of sensitive information from the database.

Impact

Exploitation of this vulnerability allows for time-based SQL injection, where an attacker can manipulate SQL queries to extract sensitive data from the database.