WP Google Review Slider, CVE-2019-25745

CVE, Research URL: CVE-2019-25745
Home page URL: Security reports for WP Google Review Slider
Application: WP Google Review Slider
Published on: Jun 04, 2026
Research Description: WordPress Plugin Google Review Slider 6.1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'tid' parameter. Attackers can send GET requests to the admin interface with malicious 'tid' values to extract sensitive database information using time-based blind SQL injection techniques.
Affected versions: max 6.1.
Status: vulnerable