CVE-2024-2879 — LayerSlider [LayerSlider] < 7.10.1

CVE	Vulnerability	Type	Severity	Affected	Fixed in	Published	Status
CVE-2024-2879	LayerSlider [LayerSlider] < 7.10.1	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')	High 7.5	< 7.10.1	7.10.1	2024-04-02	—

CVE-2024-2879

Update the WordPress LayerSlider plugin to the latest available version (at least 7.10.1). AmrAwad discovered and reported this SQL Injection vulnerability in WordPress LayerSlider Plugin. This could allow a malicious actor to directly interact with your database, including but not limited to stealing information. This vulnerability has been fixed in version 7.10.1. Have additional information or questions about this entry? Get in touch.

Source: Patchstack

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)