Slider Image Vulnerabilities

The Responsive Slider – Image Slider – Slideshow for WordPress plugin for WordPress is vulnerable to blind SQL Injection via the ‘catid’ parameter in versions up to, and including, 2.8.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes...

CVSS:

8.8

Affected:

up to 2.8.7

Fixed in:

2.8.7

Disclosed:

Jul 22, 2015

The Responsive Slider – Image Slider – Slideshow for WordPress plugin for WordPress is vulnerable to multiple SQL Injection attacks via the ‘removeslide’ parameter in versions before 2.7.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This mak...

CVSS:

7.2

Affected:

up to 2.7.0

Fixed in:

2.7.0

Disclosed:

Mar 12, 2015

CVE-2015-2062 on NVD →