CVE-2024-5543 is a time-based SQL Injection vulnerability in the Slideshow Gallery LITE WordPress plugin (versions up to 1.8.1). The issue arises from improper neutralization of special elements in the 'id' parameter, allowing authenticated users with Contributor-level privileges or higher to append malicious SQL queries. This vulnerability stems from insufficient escaping of user input and lack of prepared statements in the plugin's SQL queries, enabling potential unauthorized data extraction from the database.

An attacker with Contributor-level or higher access can exploit this vulnerability to execute arbitrary SQL commands appended to existing queries. This can result in unauthorized disclosure of sensitive information from the database. The vulnerability does not allow privilege escalation or remote unauthenticated exploitation but can compromise data integrity and confidentiality within the scope of the authenticated user's permissions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict Contributor-level access to trusted users only and monitor for suspicious activity related to the plugin. Avoid using the affected versions of the Slideshow Gallery LITE plugin if possible.