CVE-2018-5374

The Dbox 3D Slider Lite plugin through 1.2.2 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

CVE-2018-5372

The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

CVE-2018-5372: Improper Neutralization of Special Elements used in an SQL Command

The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

CVE-2018-5374: Improper Neutralization of Special Elements used in an SQL Command

The Dbox 3D Slider Lite plugin through 1.2.2 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

PT-2018-16930

Name of the Vulnerable Software and Affected Versions Dbox 3D Slider Lite plugin versions prior to 1.2.3 Description The issue concerns SQL Injection via the settings/sliders.php endpoint, specifically the current slider id parameter. Recommendations For Dbox 3D Slider Lite plugin versions prior ...

PT-2018-16928

Name of the Vulnerable Software and Affected Versions Testimonial Slider plugin versions prior to 1.2.5 Description The issue allows for SQL Injection via the current slider id parameter in the settings/sliders.php file. Recommendations For Testimonial Slider plugin versions prior to 1.2.5, updat...