What’s Vulnerable › Vulnerabilities

CVE-2022-1684: Cube Slider <= 1.2 - Admin+ SQLi

• Severity: low (CVSS 2.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-06-08 · updated 2026-06-17
• Weakness: CWE-89

Description

The Cube Slider WordPress plugin through 1.2 does not sanitise and escape the idslider parameter before using it in various SQL queries, leading to SQL Injections exploitable by high privileged users such as admin

Affected products

• CUBE SLIDER: through 1.2

References

• https://bulletin.iese.de/post/cube-slider_1-2
• https://wpscan.com/vulnerability/db7fb815-945a-41c7-8932-834cc646a806
• https://bulletin.iese.de/post/cube-slider_1-2
• https://wpscan.com/vulnerability/db7fb815-945a-41c7-8932-834cc646a806

Get alerted when CVE-2022-1684 or the next vulnerability affects your stack