WordPress Dbox 3D Slider Lite Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Dbox 3D Slider Lite plugin is used in one of the 3D slider to add plug-ins. A SQL injection vulnerability exists i...

Sql injection

The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

CVE-2018-5372

The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

CVE-2018-5374

The Dbox 3D Slider Lite plugin through 1.2.2 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

CVE-2018-5374

CVE-2018-5374 affects WordPress Dbox 3D Slider Lite plugin (

PT-2018-16928

Name of the Vulnerable Software and Affected Versions Testimonial Slider plugin versions prior to 1.2.5 Description The issue allows for SQL Injection via the current slider id parameter in the settings/sliders.php file. Recommendations For Testimonial Slider plugin versions prior to 1.2.5, updat...

CVE-2018-5372: Improper Neutralization of Special Elements used in an SQL Command

The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

CVE-2018-5374: Improper Neutralization of Special Elements used in an SQL Command

The Dbox 3D Slider Lite plugin through 1.2.2 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

PT-2018-16930

Name of the Vulnerable Software and Affected Versions Dbox 3D Slider Lite plugin versions prior to 1.2.3 Description The issue concerns SQL Injection via the settings/sliders.php endpoint, specifically the current slider id parameter. Recommendations For Dbox 3D Slider Lite plugin versions prior ...