CVE-2023-0260 (published 2023-02-13T14:32:12.713Z)
The WP Review Slider WordPress plugin before 12.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.
Affected products: Vendor: Unknown
Product: WP Review Slider
Versions: 0