CVE-2015-9454

The CVE corresponds to a SQL Injection in the WordPress Smooth Slider plugin (versions before 2.7). The vulnerability is triggered via the admin page parameter current_slider_id on wp-admin/admin.php?page=smooth-slider-admin, with the issue reported by multiple sources; CVSS data in the NVD shows...

CVE-2018-5373

The CVE-2018-5373 entry applies to the WordPress plugin Smooth Slider up to version 2.8.6, which is vulnerable to SQL Injection via smooth-slider.php with the trid parameter. The root cause involves the use of $wpdb->get_var() without proper input sanitization, enabling an attacker with releva...