WordPress Plugin Vulnerabilities

SH Slideshow <= 3.1.4 - SQL Injection

Description

The SH Slideshow WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
sh-slideshow
Fixed in 3.1.5

References

Exploitdb
17748

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
b45ef3e7-0452-490b-8fd0-44e6f6d80c43

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-09-09
Title
Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net < 1.117.6 - Authenticated (Contributor+) SQL Injection via order_by Parameter
Published
2025-12-14
Title
CountDown With Image or Video Background <= 1.5 - Authenticated (Contributor+) SQL Injection
Published
2024-03-26
Title
Slider by Supsystic < 1.8.11 - Authenticated (Admin+) SQL Injection
Published
2021-11-29
Title
MOLIE <= 0.5 - Authenticated SQL Injection
Published
2024-05-09
Title
LearnPress – WordPress LMS Plugin < 4.2.6.6 - Unauthenticated Time-Based SQL Injection