CVE-2023-5428

🗓️ 31 Oct 2023 08:32:47Reported by WordfenceType

The Image vertical reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with subscriber-level and above permissions to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2023-5428	31 Oct 202311:20	–	circl
CNNVD	WordPress Plugin Image vertical reel scroll slideshow SQL Injection Vulnerability	31 Oct 202300:00	–	cnnvd
Cvelist	CVE-2023-5428 Image vertical reel scroll slideshow <= 9.0 - Authenticated (Subscriber+) SQL Injection via Shortcode	31 Oct 202308:32	–	cvelist
EUVD	EUVD-2023-57743	3 Oct 202520:07	–	euvd
NVD	CVE-2023-5428	31 Oct 202309:15	–	nvd
OSV	CVE-2023-5428	31 Oct 202309:15	–	osv
Patchstack	WordPress Image vertical reel scroll slideshow Plugin <= 9.0 is vulnerable to SQL Injection	30 Oct 202300:00	–	patchstack
Prion	Sql injection	31 Oct 202309:15	–	prion
Positive Technologies	PT-2023-32097 · WordPress · Image Vertical Reel Scroll Slideshow Plugin	31 Oct 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-5428	23 May 202502:39	–	redhatcve

NVD

Vulners

Node

gopiplus image_vertical_reel_scroll_slideshowRange<9.1wordpress

[
  {
    "vendor": "gopiplus",
    "product": "Image vertical reel scroll slideshow",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "9.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/2985333/image-vertical-reel-scroll-slideshow
plugins	www.plugins.trac.wordpress.org/browser/image-vertical-reel-scroll-slideshow/trunk/image-vertical-reel-scroll-slideshow.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/01d31d8a-4459-488a-9cbe-92761faa58b4

08 Apr 2026 17:17Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.5 - 8.8

EPSS0.00204

SSVC

CWE-89