CVE-2023-5435

Summary

CVE-2023-5435 is a vulnerability affecting the Up down image slideshow gallery plugin for WordPress. This issue allows authenticated attackers with subscriber-level permissions and above to perform SQL Injection, due to insufficient escaping on user-supplied parameters and a lack of sufficient preparation on existing SQL queries. Attackers can append extra SQL queries to existing ones, potentially extracting sensitive data from the database. Versions up to and including 12.0 are susceptible to this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.