WordPress Plugin Vulnerabilities

Social Slider < 6.0.0 - social-slider-2/ajax.php rA Parameter SQL Injection

Description

The social-slider-2 WordPress plugin was affected by a social-slider-2/ajax.php rA Parameter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
social-slider-2
Fixed in 6.0.0

References

Exploitdb
17617

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
21b6a39e-5885-4013-ae6d-7e1b239d45ea

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2021-09-13
Title
Poll Maker < 3.4.2 - Unauthenticated Time Based SQL Injection
Published
2026-04-07
Title
Attendance Manager <= 0.6.2 - Authenticated (Subscriber+) SQL Injection via 'attmgr_off' Parameter
Published
2024-04-26
Title
ProfileGrid < 5.7.2 - Authenticated (Contributor+) SQL Injection
Published
2025-12-12
Title
URL Shortener Plugin For WordPress <= 3.0.7 - Unauthenticated SQL Injection
Published
2025-12-15
Title
Ninja Tables < 5.2.4 - Authenticated (Administrator+) SQL Injection