LayerSlider WordPress plugin versions between 7.9.11 and 7.10.0 are affected by an unauthenticated SQL Injection vulnerability.
The vulnerability exists due to insufficient sanitization of user-supplied input, allowing an unauthenticated remote attacker to manipulate SQL queries executed by the application.
Successful exploitation could allow an attacker to extract sensitive information from the database or modify database content without authentication.
Updating the plugin to version 7.10.1 or later is strongly recommended to mitigate this vulnerability.