Description

WordPress Plugin WP Airbnb Review Slider is prone to an SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. WordPress Plugin WP Airbnb Review Slider version 3.2 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 3.3 or latest

References

https://sploitus.com/exploit?id=WPEX-ID:5D8C28AC-A46C-45D3-ACC9-2CD2E6356BA2

https://plugins.trac.wordpress.org/changeset/2849998

Related Vulnerabilities

WordPress Plugin WP Customize Login Cross-Site Scripting (1.1)

WordPress Plugin Admin side data storage for Contact Form 7 Cross-Site Scripting (1.1.1)

Magento CVE-2019-8150 Vulnerability (CVE-2019-8150)

WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Cross-Site Scripting (1.5.73)

Caddy Web Server Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2026-30852)

Severity

High

Classification

CVE-2023-0262 CWE-89 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Missing Update SQL Injection