CVE-2026-42710: WordPress Slider by 10Web plugin <= 1.2.63 - SQL Injection vulnerability
Published Oct 7, 2026
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Slider by 10Web slider-wd allows Blind SQL Injection.This issue affects Slider by 10Web: from n/a through 1.2.63.
Affected Software
1 affected component
10web Slider by 10Web<=1.2.63
Event History
Oct 7, 2026
CVE Published
via MITRE·11:55 AM
Data Sourced
via MITRE·11:55 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which installations are affected?
Slider by 10Web versions through 1.2.63 are affected. The affected version range does not identify a lower bound.
2
What level of access does an attacker need?
The vulnerability is network-reachable and has low attack complexity, but exploitation requires high privileges. No user interaction is required.
3
What could successful exploitation allow?
The issue allows blind SQL injection. The supplied severity vector indicates high confidentiality impact, no integrity impact, and low availability impact, with impact extending beyond the vulnerable component.