A critical SQL injection vulnerability in the LayerSlider WordPress plugin allows attackers to extract sensitive information.