Description

Unauthenticated SQL Injection in Depicter Slider <= 4.8.0 versions.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "7.5",
  "pubDate": "2026-08-18T15:16:57.430Z",
  "pubdate": "2026-08-18T15:16:57.430Z",
  "executiveSummary": "An unauthenticated SQL Injection vulnerability has been identified in the Depicter Slider plugin affecting versions 4.8.0 and below. This security flaw permits remote, unauthenticated threat actors to manipulate database queries by injecting malicious SQL payloads into vulnerable input parameters handled by the application. The primary impact of this vulnerability includes unauthorized access to sensitive database contents, potential data exfiltration, and complete compromise of the underlying database management system depending on the database user privileges. The flaw exposes the affected WordPress installations over the network without requiring any prior authentication or specific user privileges, significantly increasing the overall risk profile and potential for automated exploitation by malicious actors in the wild. Exploitation requires direct reachability to the vulnerable endpoint exposed by the Depicter Slider plugin.",
  "technicalDetails": "The vulnerability stems from insufficient sanitization and validation of user-supplied input before it is concatenated directly into database queries within the Depicter Slider codebase. Specifically, the vulnerable component fails to utilize parameterized queries or proper prepared statements when processing requests, allowing raw SQL commands to be executed directly by the database engine. The affected versions comprise Depicter Slider <= 4.8.0. The attack flow commences when an unauthenticated remote attacker crafts a malicious HTTP request containing SQL injection payloads directed at the vulnerable endpoint exposed by the plugin over the network. Upon receipt, the vulnerable parameter processes the input without adequate escaping or type casting, thereby altering the intended logic of the SQL query. The payload behavior allows the attacker to execute arbitrary SQL commands, perform union-based data retrieval, extract sensitive information such as administrator credentials or user data tables, and potentially interact with the underlying operating system if database configurations permit. Due to the lack of authentication and privilege requirements, any remote user can initiate the attack vector directly. Post-exploitation impact encompasses total confidentiality and integrity breaches of the database, potentially leading to full site takeover through privilege escalation or database-level persistence mechanisms."
}