CVE · High

CVE-2024-2879 — LayerSlider [LayerSlider] < 7.10.1

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-2879 LayerSlider [LayerSlider] < 7.10.1 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') High 7.5 < 7.10.1 7.10.1 2024-04-02

CVE-2024-2879

The LayerSlider WordPress plugin before version 7.10.1 contains a SQL injection flaw that was discovered and reported by AmrAwad. An attacker could exploit this vulnerability to execute unauthorized database queries and potentially extract sensitive information from the database. This issue has been resolved in version 7.10.1 and users should upgrade immediately.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.