CVEDB API

The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php (current_slider_id parameter).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 65.3%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2018-5372

Slidervilla » Testimonial Slider » Version: 1.0.1

cpe:2.3:a:slidervilla:testimonial_slider:1.0.1
Slidervilla » Testimonial Slider » Version: 1.1

cpe:2.3:a:slidervilla:testimonial_slider:1.1
Slidervilla » Testimonial Slider » Version: 1.1.1

cpe:2.3:a:slidervilla:testimonial_slider:1.1.1
Slidervilla » Testimonial Slider » Version: 1.1.2

cpe:2.3:a:slidervilla:testimonial_slider:1.1.2
Slidervilla » Testimonial Slider » Version: 1.1.3

cpe:2.3:a:slidervilla:testimonial_slider:1.1.3
Slidervilla » Testimonial Slider » Version: 1.1.4

cpe:2.3:a:slidervilla:testimonial_slider:1.1.4
Slidervilla » Testimonial Slider » Version: 1.2

cpe:2.3:a:slidervilla:testimonial_slider:1.2
Slidervilla » Testimonial Slider » Version: 1.2.1

cpe:2.3:a:slidervilla:testimonial_slider:1.2.1
Slidervilla » Testimonial Slider » Version: 1.2.3

cpe:2.3:a:slidervilla:testimonial_slider:1.2.3