CVE-2025-30979: WordPress Pixelating image slideshow gallery plugin <= 8.0 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Pixelating image slideshow gallery allows SQL Injection. This issue affects Pixelating image slideshow gallery: from n/a through 8.0.
Other sources
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Pixelating image slideshow gallery pixelating-image-slideshow-gallery allows SQL Injection.This issue affects Pixelating image slideshow gallery: from n/a through <= 8.0.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30979?
CVE-2025-30979 is classified as a high severity SQL Injection vulnerability that can lead to unauthorized database access.
How do I fix CVE-2025-30979?
To fix CVE-2025-30979, update the Pixelating image slideshow gallery plugin to the latest version beyond 8.0.
What products are affected by CVE-2025-30979?
CVE-2025-30979 affects the Gopiplus Pixelating image slideshow gallery and the WordPress Pixelating image slideshow gallery plugin up to version 8.0.
What is SQL Injection in the context of CVE-2025-30979?
In the context of CVE-2025-30979, SQL Injection refers to the improper handling of special elements in SQL commands, allowing attackers to manipulate database queries.
Can CVE-2025-30979 be exploited remotely?
Yes, CVE-2025-30979 can be exploited remotely, allowing attackers to execute arbitrary SQL commands on the affected systems.