CVE-2022-0383

Name of the Vulnerable Software and Affected Versions WP Review Slider versions prior to 11.0

Description The issue concerns the WP Review Slider WordPress plugin, where the pid parameter is not properly sanitized and escaped when copying a Twitter source. This could allow high-privilege users to perform SQL injection attacks.

Recommendations For versions prior to 11.0, update to version 11.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the Twitter source copying feature to minimize the risk of exploitation. Avoid using the pid parameter in the affected functionality until the issue is resolved.