CVE-2026-15651

The WP TripAdvisor Review Slider plugin for WordPress is vulnerable to generic SQL Injection via the 'filtersource' parameter in all versions up to, and including, 14.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

PT-2026-49627

The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'curselrevs' parameter of the wpfb find reviews AJAX action in versions up to, and including, 12.6.8. This is due to the handler reading $ POST'curselrevs' raw with no sanitization or type casting, then...

CVE-2026-32491

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jgwhite33 WP Review Slider wp-facebook-reviews allows Stored XSS.This issue affects WP Review Slider: from n/a through = 13.9...

CVE-2024-2310

The WP Google Review Slider WordPress plugin versions prior to 13.6 is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the failure to properly sanitise and escape certain plugin settings. This vulnerability allows high-privilege users, such as administrators , to execu...

CVE-2023-23890

CVE-2023-23890 affects the WordPress plugin WP Airbnb Review Slider (LJ Apps) versioned up to 3.2. The vulnerability is a Cross-Site Request Forgery (CSRF) that can lead to reviews being removed; Patch details indicate the issue is exploitable by an unauthenticated attacker and is fixed in versio...