Description
WordPress Plugin WordPress Slider-WP 1 Slider [only if downloaded via the vendor website] contains suspicious code. Attackers can exploit this issue to perform a variety of actions. Successful attacks will compromise the affected application and possibly the webserver or computer. WordPress Plugin WordPress Slider-WP 1 Slider version 1.2.9 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.3.0 or latest
References
Related Vulnerabilities
WordPress Plugin WP Custom Admin Interface PHP Object Injection (7.28)
WordPress Plugin Rotating Testimonial Cross-Site Scripting (1.1)
WordPress Plugin ZM Gallery SQL Injection (1.0)
WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.7)
WordPress Plugin post highlights 'ph_settings.php' SQL Injection (2.2)