Flickr Set Slideshows Vulnerabilities

[en] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Flickr set slideshows allows SQL Injection. This issue affects Flickr set slideshows: from n/a through 0.9.

Affected:

up to 0.9

Fix:

No patched version reported

Disclosed:

Apr 1, 2025

CVE-2025-30589 on NVD →

The Flickr set slideshows plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access...

CVSS:

6.5

Affected:

up to 0.9

Fix:

No patched version reported

Disclosed:

Mar 27, 2025

CVE-2025-30589 on NVD →

The Flickr set slideshows plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access...

CVSS:

6.5

Affected:

up to 0.9

Fix:

No patched version reported

Disclosed:

Mar 24, 2025

CVE-2025-30590 on NVD →

[en] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dourou Flickr set slideshows allows SQL Injection. This issue affects Flickr set slideshows: from n/a through 0.9.

Affected:

up to 0.9

Fix:

No patched version reported

Disclosed:

Mar 24, 2025

CVE-2025-30590 on NVD →