EUVD-2026-53286

The WP TripAdvisor Review Slider plugin for WordPress is vulnerable to generic SQL Injection via 'curselrevs' Parameter in all versions up to, and including, 14.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes i...

CVE-2026-11969 WP TripAdvisor Review Slider <= 14.3 - Authenticated (Administrator+) SQL Injection

The WP TripAdvisor Review Slider plugin for WordPress is vulnerable to generic SQL Injection via 'curselrevs' Parameter in all versions up to, and including, 14.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes i...

CVE-2026-11969 WP TripAdvisor Review Slider <= 14.3 - Authenticated (Administrator+) SQL Injection

The WP TripAdvisor Review Slider plugin for WordPress is vulnerable to generic SQL Injection via 'curselrevs' Parameter in all versions up to, and including, 14.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes i...

CVE-2026-11969: Improper Neutralization of Special Elements used in an SQL Command

The WP TripAdvisor Review Slider plugin for WordPress is vulnerable to generic SQL Injection via 'curselrevs' Parameter in all versions up to, and including, 14.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes i...

WordPress WP TripAdvisor Review Slider plugin <= 14.3 - Authenticated (Administrator+) SQL Injection vulnerability

Authenticated Administrator+ SQL Injection vulnerability discovered by yuyudhn in WordPress Plugin WP TripAdvisor Review Slider versions = 14.3...

MAL-2026-11581 Malicious code in @nebula.js/sn-slider (npm)

npm/@nebula.js/sn-slider is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republishe...

Malicious code in @nebula.js/sn-slider (npm)

npm/@nebula.js/sn-slider is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republishe...

WordPress apptha-slider-gallery plugin <= 1.0 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Ihsan Sencan in WordPress Plugin Apptha Slider Gallery versions = 1.0...

WordPress WP Google Review Slider plugin <= 6.1 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Princy Edward in WordPress Plugin WP Google Review Slider versions = 6.1...

CVE-2026-18344

The Wp Responsive Thumbnail Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' parameter in versions up to, and excluding, 1.1.53. This is due to insufficient input sanitization and output escaping in the responsivethumbnailimagemanagement function, which...

CVE-2026-18344

The Wp Responsive Thumbnail Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' parameter in versions up to, and excluding, 1.1.53. This is due to insufficient input sanitization and output escaping in the responsivethumbnailimagemanagement function, which...

CVE-2026-18344 Responsive Thumbnail Slider < 1.1.53 - Reflected Cross-Site Scripting via 'id' Parameter

The Wp Responsive Thumbnail Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' parameter in versions up to, and excluding, 1.1.53. This is due to insufficient input sanitization and output escaping in the responsivethumbnailimagemanagement function, which...

CVE-2026-18344

The WordPress plugin Wp Responsive Thumbnail Slider is affected by a Reflected Cross-Site Scripting vulnerability via the 'id' parameter in versions up to but excluding 1.1.53 . Root cause: insufficient input sanitization and output escaping in responsive_thumbnail_image_management() echoes $_GET...

CVE-2026-18344: Improper Neutralization of Input During Web Page Generation

The Wp Responsive Thumbnail Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' parameter in versions up to, and excluding, 1.1.53. This is due to insufficient input sanitization and output escaping in the responsivethumbnailimagemanagement function, which...

PT-2026-67130

Name of the Vulnerable Software and Affected Versions Wp Responsive Thumbnail Slider versions prior to 1.1.53 Description Reflected Cross-Site Scripting occurs when unauthenticated attackers trick users into clicking a specially crafted link. The issue stems from insufficient input sanitization a...

WordPress Apptha Slider Gallery plugin <= 1.0 - Unauthenticated Arbitrary File Download vulnerability

Unauthenticated Arbitrary File Download vulnerability discovered by Ihsan Sencan in WordPress Plugin Apptha Slider Gallery versions = 1.0...

CVE-2026-66427

Administrator SQL Injection in WP Google Review Slider = 18.4 versions...

CVE-2026-66428

Unauthenticated Cross Site Request Forgery CSRF in WP Google Review Slider = 18.4 versions...

CVE-2026-66428

WP Google Review Slider plugin for WordPress (

CVE-2026-66428 WordPress WP Google Review Slider plugin <= 18.4 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in WP Google Review Slider = 18.4 versions...