CVE-2023-5431

Summary

CVE-2023-5431 is a vulnerability affecting the Left right image slideshow gallery plugin for WordPress. This issue allows authenticated attackers with subscriber-level or higher permissions to inject SQL queries into the plugin's shortcode, due to insufficient escaping and inadequate preparation of user-supplied parameters. As a result, sensitive information from the database can be extracted. This vulnerability poses a significant risk, and affected users are urged to update to the latest plugin version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.