CVE-2026-13015

🗓️ 01 Jul 2026 03:43:36Reported by WordfenceType

WordPress plugin WordPress Google Places Review Slider versions up to eighteen point one allow reflected cross site scripting via the place parameter.

Reporter	Title	Published	Views	Family All 4
ATTACKERKB	CVE-2026-13015	1 Jul 202603:43	–	attackerkb
Cvelist	CVE-2026-13015 WP Google Review Slider <= 18.1 - Reflected Cross-Site Scripting via 'place' Parameter	1 Jul 202603:43	–	cvelist
EUVD	EUVD-2026-40896	1 Jul 202603:43	–	euvd
NVD	CVE-2026-13015	1 Jul 202605:16	–	nvd

Vulners

Node

jgwhite33 wp_google_review_sliderRange≤18.1wordpress

[
  {
    "vendor": "jgwhite33",
    "product": "WP Google Review Slider",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "18.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/wp-google-places-review-slider/trunk/admin/partials/googlecrawl_dfs.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/815054e2-c575-439a-9a66-fce251b4da80
plugins	www.plugins.trac.wordpress.org/changeset
plugins	www.plugins.trac.wordpress.org/browser/wp-google-places-review-slider/trunk/admin/partials/googlecrawl_dfs.php
plugins	www.plugins.trac.wordpress.org/browser/wp-google-places-review-slider/trunk/admin/partials/googlecrawl_dfs.php

01 Jul 2026 05:16Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.16.1

CWE-79