CVE-2019-25745 - WordPress Plugin Google Review Slider 6.1 SQL Injection via tid

Back Back to CVE browser

HIGH

WordPress Plugin Google Review Slider 6.1 SQL Injection via tid

Published Jun 4, 2026

8.8

HIGH

CVSS 4.0

EPSS 0.26%

Description

WordPress Plugin Google Review Slider 6.1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'tid' parameter. Attackers can send GET requests to the admin interface with malicious 'tid' values to extract sensitive database information using time-based blind SQL injection techniques.

Affected products

Vendor Jgwhite33 Product Google Review Slider Default
n/a
- Version
  6.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Jgwhite33

Google Review Slider

n/a

Version	Status	Constraints
6.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-20181
Advisory
https://wordpress.org/plugins/wp-google-places-review-slider/
product
https://www.exploit-db.com/exploits/47567
exploit
https://www.vulncheck.com/advisories/wordpress-plugin-google-review-slider-sql-injection-via-tid
third-party-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-20181		Advisory
https://wordpress.org/plugins/wp-google-places-review-slider/		product
https://www.exploit-db.com/exploits/47567		exploit
https://www.vulncheck.com/advisories/wordpress-plugin-google-review-slider-sql-injection-via-tid		third-party-advisory