CVE-2023-5435

Summary (CVE-2023-5435) The Up down image slideshow gallery WordPress plugin is vulnerable to SQL Injection via its shortcode in versions ≤12.0 due to insufficient escaping of user input and lack of proper query preparation. An authenticated attacker with subscriber-level or higher privileges can...