{"id":"CVE-2025-31640","aliases":["EUVD-2025-15470","GHSA-c29g-jjrw-x2ff"],"status":"published","title":"WordPress Magic Responsive Slider and Carousel WordPress plugin \u003c 1.6 - SQL Injection Vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Magic Responsive Slider and Carousel WordPress magic-carousel allows SQL Injection.This issue affects Magic Responsive Slider and Carousel WordPress: from n/a through \u003c 1.6.","severity":{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.0044,"percentile":0.38721,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2025-05-16T15:45:37Z","modified":"2026-06-17T09:10:43Z","products":[{"vendor":"lambertgroup","product":"magic responsive slider and carousel wordpress"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/magic-carousel/vulnerability/wordpress-magic-responsive-slider-and-carousel-wordpress-1-4-sql-injection-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31640"},{"url":"https://patchstack.com/database/wordpress/plugin/magic-carousel/vulnerability/wordpress-magic-responsive-slider-and-carousel-wordpress-1-4-sql-injection-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-c29g-jjrw-x2ff"}],"sources":{"cve":[{"id":"CVE-2025-31640","title":"WordPress Magic Responsive Slider and Carousel WordPress plugin \u003c 1.6 - SQL Injection Vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Magic Responsive Slider and Carousel WordPress magic-carousel allows SQL Injection.This issue affects Magic Responsive Slider and Carousel WordPress: from n/a through \u003c 1.6.","status":"published","published":"2025-05-16T15:45:37.673Z","modified":"2026-05-12T00:17:19.924Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:32:44.424933Z"}],"euvd":[{"id":"EUVD-2025-15470","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Magic Responsive Slider and Carousel WordPress magic-carousel allows SQL Injection.This issue affects Magic Responsive Slider and Carousel WordPress: from n/a through \u003c 1.6.","status":"published","published":"2025-05-16T15:45:37Z","modified":"2026-05-12T00:17:19Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high"}],"updated_at":"2026-11-02T19:04:39.866981Z"}],"ghsa":[{"id":"GHSA-c29g-jjrw-x2ff","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Magic Responsive Slider and Carousel WordPress allows SQL Injection. This issue affects Magic Responsive Slider and Carousel WordPress: from n/a through 1.4.","status":"published","published":"2025-05-16T18:31:06Z","modified":"2025-05-16T18:31:10Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:02:19.907667Z"}],"nvd":[{"id":"CVE-2025-31640","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Magic Responsive Slider and Carousel WordPress magic-carousel allows SQL Injection.This issue affects Magic Responsive Slider and Carousel WordPress: from n/a through \u003c 1.6.","status":"published","published":"2025-05-16T16:15:37.55Z","modified":"2026-06-17T09:10:43.013Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:11:08.321805Z"}]}}