CVE-2019-25212

CVE-2019-25212 describes a SQL Injection vulnerability in the video carousel slider with lightbox plugin for WordPress, affecting all versions up to and including 1.0.6. This flaw allows authenticated attackers with administrator privileges to extract sensitive database information by manipulating the 'id' parameter. Rated 7.2 HIGH, the vulnerability has a network attack vector with low complexity, enabling high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.