PT-2026-60445 · WordPress · Wp Tripadvisor Review Slider
CVSS v3.1
4.9
Medium
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
WP TripAdvisor Review Slider versions prior to 14.7
Description
Insufficient escaping of user-supplied input and lack of proper preparation in SQL queries allow authenticated attackers with administrator-level access and above to perform a generic SQL Injection. By manipulating the
filtersource parameter, an attacker can append additional SQL queries to extract sensitive information from the database.Recommendations
Update WP TripAdvisor Review Slider to version 14.7 or later.
As a temporary mitigation, restrict access to the administrative functions that utilize the
filtersource parameter.Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wp Tripadvisor Review Slider