Skip to content
OpenAdvisories

Product · Hero Plugins

Hero Slider - WordPress Slider Plugin

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    Hero Slider - WordPress Slider Plugin <= 1.3.5 - Authenticated (Subscriber+) SQL Injection

    The Hero Slider - WordPress Slider Plugin plugin for WordPress is vulnerable to SQL Injection via several parameters in all versions up to, and including, 1.3.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on …