← WordPress Vulnerabilities
WordPress security by component

wp image slideshow

wp image slideshow is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Oct 31, 2023; the highest CVE/CNA score is 8.8.

Plugin slug: wp-image-slideshow

CVE-2023-5438: wp image slideshow: SQL injection

wp image slideshow is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data.

PublishedOct 31, 2023
Safe version guidanceSee mitigation notes
Safe version
Oct 31, 2023 CVE-2023-5438
wp image slideshow: SQL injection
wp image slideshow is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE8.8
NVD6.5