EUVD-2023-57780

Malicious code in bioql PyPI...

Malicious code in anything_slider (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in anything-slider_rails (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2023-5466

The Wp anything slider plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

Sql injection

The Wp anything slider plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2023-5466

CVE-2023-5466 affects the WordPress plugin WP Anything Slider, up to version 9.1. The issue is an SQL Injection due to insufficient escaping of user-supplied shortcode parameters and lack of proper query preparation, enabling authenticated attackers with subscriber-level+ permissions to inject ad...

CVE-2023-5466 Wp anything slider <= 9.1 - Authenticated (Subscriber+) SQL Injection via Shortcode

The Wp anything slider plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2023-5466: Improper Neutralization of Special Elements used in an SQL Command

The Wp anything slider plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

WordPress Plugin Wp anything slider security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2023-32121 · WordPress · Wp Anything Slider Plugin

Name of the Vulnerable Software and Affected Versions: Wp anything slider plugin for WordPress versions up to, and including, 9.1 Description: The issue arises from insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query in the plugin's...

WordPress Wp anything slider Plugin <= 9.1 is vulnerable to SQL Injection

Software Wp anything slider Type Plugin Vulnerable versions = 9.1 Fixed in 9.2 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-5466 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 0bc48bf2d3e2 Credits István Márton Required privilege Contributor...