CVE-2025-31640: WordPress Magic Responsive Slider and Carousel WordPress plugin < 1.6 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Magic Responsive Slider and Carousel WordPress allows SQL Injection. This issue affects Magic Responsive Slider and Carousel WordPress: from n/a through 1.4.
Other sources
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Magic Responsive Slider and Carousel WordPress magic-carousel allows SQL Injection.This issue affects Magic Responsive Slider and Carousel WordPress: from n/a through < 1.6.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-31640?
CVE-2025-31640 is classified as an SQL Injection vulnerability, which can lead to unauthorized database access.
How do I fix CVE-2025-31640?
To fix CVE-2025-31640, upgrade the affected LambertGroup Magic Responsive Slider and Carousel to version 1.4 or higher.
What versions are affected by CVE-2025-31640?
CVE-2025-31640 affects all versions of LambertGroup Magic Responsive Slider and Carousel prior to version 1.4.
What type of vulnerability is CVE-2025-31640?
CVE-2025-31640 is a SQL Injection vulnerability, which arises from improper neutralization of special elements in SQL commands.
What are the potential risks of CVE-2025-31640?
The potential risks of CVE-2025-31640 include unauthorized access to the database, data manipulation, and retrieval of sensitive information.