WordPress Logo Slider plugin SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. The WordPress Logo Slider plugin 1.4.8 and earlier versions are vulnerable to SQL injection, which stems from a vulnerability in the Manage Slider Images administration page where the plugin The lsp_slider_id parameter used in the Manage Slider Images administration page is not filtered and escaped. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.