CVE-2022-1687: Logo Slider <= 1.4.8 - Admin+ SQLi

Severity: low (CVSS 2.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-06-08 · updated 2026-06-17
Weakness: CWE-89

Description

The Logo Slider WordPress plugin through 1.4.8 does not sanitise and escape the lsp_slider_id parameter before using it in a SQL statement via the Manage Slider Images admin page, leading to an SQL Injection

Affected products

Logo Slider Project Logo Slider: through 1.4.8

References

https://bulletin.iese.de/post/logo-slider_1-4-8
https://wpscan.com/vulnerability/e7506906-5c3d-4963-ae24-55f18c3e5081
https://bulletin.iese.de/post/logo-slider_1-4-8
https://wpscan.com/vulnerability/e7506906-5c3d-4963-ae24-55f18c3e5081

Get alerted when CVE-2022-1687 or the next vulnerability affects your stack