PT-2026-46215 · Jgwhite33 · Wp Google Review Slider

Princy Edward · Published 2026-06-04 · Updated 2026-06-04 · CVE-2019-25745

NVD

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

WordPress Plugin Google Review Slider 6.1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'tid' parameter. Attackers can send GET requests to the admin interface with malicious 'tid' values to extract sensitive database information using time-based blind SQL injection techniques.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2019-25745

Affected Products

Wp Google Review Slider

References · 4

• 🔥 https://exploit-db.com/exploits/47567 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25745 · Security Note
• https://vulncheck.com/advisories/wordpress-plugin-google-review-slider-sql-injection-via-tid · Note
• https://wordpress.org/plugins/wp-google-places-review-slider · Note