Description
The WP Review Slider WordPress plugin before 11.0 does not sanitise and escape the pid parameter when copying a Twitter source, which could allow a high privilege users to perform SQL Injections attacks
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WP Review Slider | 11.0 – < 11.0 | 11.0 |