CVE-2019-25745

HIGH

WordPress Plugin Google Review Slider 6.1 SQL Injection via tid

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2019-25745 has a selected CVSS score of 8.8 (high); EIP currently links 1 catalogued exploit.

Description

WordPress Plugin Google Review Slider 6.1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'tid' parameter. Attackers can send GET requests to the admin interface with malicious 'tid' values to extract sensitive database information using time-based blind SQL injection techniques.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 4, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Google Review Slider

Browse jgwhite33 / Google Review Slider
CVE List6.1affected

Proofs of concept

1

Catalogued exploits

ExploitDBWordPress Plugin Google Review Slider 6.1 - 'tid' SQL InjectionExploitDB exploitby Princy EdwardNot analyzed1 file
ExploitDB
PoC details

References

4