WordPress · Chop Slider 3 · CVE-2020-11530
**Name of the Vulnerable Software and Affected Versions**
Chop Slider 3 (affected versions not specified)
**Description**
A blind SQL injection issue is present, allowing an attacker to execute arbitrary SQL queries in the context of the WP database user. The issue is introduced through the `id` GET parameter supplied to "get script/index.php".
**Recommendations**
As a temporary workaround, consider restricting access to the "get script/index.php" endpoint until a patch is available.
Avoid using the `id` parameter in the affected endpoint until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.