← WordPress Vulnerabilities
WordPress security by component

WP fade in text news

WP fade in text news is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Oct 31, 2023; the highest CVE/CNA score is 8.8.

Plugin slug: wp-fade-in-text-news

CVE-2023-5437: WP fade in text news: SQL injection

WP fade in text news is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data.

PublishedOct 31, 2023
Safe version guidanceSee mitigation notes
Safe version
Oct 31, 2023 CVE-2023-5437
WP fade in text news: SQL injection
WP fade in text news is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE8.8
NVD6.5