CVE-2026-84095 WP Review Slider Pro < 12.7.12 - Subscriber+ Stored XSS via Review Import

The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on one of its AJAX handlers, and the nonce protecting it is generated for every visitor, allowing any authenticated user, such as a subscriber, to store arbitrary review content which is later output...

CVE-2026-84096 WP Review Slider Pro < 12.7.12 - Subscriber+ Stored XSS via Review Form Fields

The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on the AJAX handler that saves its review submission forms, and the nonce protecting it is generated for every visitor, allowing any authenticated user, such as a subscriber, to overwrite a live form with...

CVE-2026-84095 WP Review Slider Pro < 12.7.12 - Subscriber+ Stored XSS via Review Import

The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on one of its AJAX handlers, and the nonce protecting it is generated for every visitor, allowing any authenticated user, such as a subscriber, to store arbitrary review content which is later output...

CVE-2026-84096

The wp-review-slider-pro WordPress plugin, in versions prior to 12.7.12 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a missing capability check on the AJAX handler used to save review submission forms, combined with a nonce that is generated for every visitor. This all...

EUVD-2026-87533

The wp-review-slider-pro WordPress plugin before 12.7.12 does not sanitize a value stored through one of its AJAX handlers, which lacks a capability check, before using it in a SQL statement, allowing any authenticated user, such as a subscriber, to perform SQL injection attacks whose results are...

EUVD-2026-87532

The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on the AJAX handler that saves its review submission forms, and the nonce protecting it is generated for every visitor, allowing any authenticated user, such as a subscriber, to overwrite a live form with...

CVE-2026-84097 WP Review Slider Pro < 12.7.12 - Subscriber+ SQLi via Stored Template Filter

The wp-review-slider-pro WordPress plugin before 12.7.12 does not sanitize a value stored through one of its AJAX handlers, which lacks a capability check, before using it in a SQL statement, allowing any authenticated user, such as a subscriber, to perform SQL injection attacks whose results are...

CVE-2026-84097

The wp-review-slider-pro WordPress plugin (versions before 12.7.12 ) is vulnerable to SQL injection . The root cause is a failure to sanitize a value stored via an AJAX handler that lacks a proper capability check. This allows any authenticated user , such as a subscriber, to perform SQL injectio...

CVE-2026-84097 WP Review Slider Pro < 12.7.12 - Subscriber+ SQLi via Stored Template Filter

The wp-review-slider-pro WordPress plugin before 12.7.12 does not sanitize a value stored through one of its AJAX handlers, which lacks a capability check, before using it in a SQL statement, allowing any authenticated user, such as a subscriber, to perform SQL injection attacks whose results are...

CVE-2026-84095

The wp-review-slider-pro WordPress plugin (versions before 12.7.12 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a lack of capability checks on an AJAX handler combined with a nonce that is generated for every visitor. This allows any authenticated user, such as a subsc...

CVE-2026-84096 WP Review Slider Pro < 12.7.12 - Subscriber+ Stored XSS via Review Form Fields

The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on the AJAX handler that saves its review submission forms, and the nonce protecting it is generated for every visitor, allowing any authenticated user, such as a subscriber, to overwrite a live form with...

EUVD-2026-87529

The WP Directory Kit WordPress plugin before 1.5.8 does not sanitize and escape some of its category and location fields before outputting them in page attributes, allowing users with a WP Directory Kit WordPress plugin before 1.5.8-specific listing-management role and without the unfilteredhtml...

WordPress WP Directory Kit plugin < 1.5.8 - Listing Admin+ Stored XSS vulnerability

Listing Admin+ Stored XSS vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin WP Directory Kit versions 1.5.8...

CVE-2026-16591 WP Directory Kit < 1.5.8 - Listing Admin+ Stored XSS via Category and Location Title and Icon Fields

The WP Directory Kit WordPress plugin before 1.5.8 does not sanitize and escape some of its category and location fields before outputting them in page attributes, allowing users with a WP Directory Kit WordPress plugin before 1.5.8-specific listing-management role and without the unfilteredhtml...

CVE-2026-16591

The WP Directory Kit WordPress plugin (versions before 1.5.8 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to properly sanitize and escape certain category and location fields before they are outputted in page attributes. An attacker with a plugin-specific lis...

CVE-2026-16591 WP Directory Kit < 1.5.8 - Listing Admin+ Stored XSS via Category and Location Title and Icon Fields

The WP Directory Kit WordPress plugin before 1.5.8 does not sanitize and escape some of its category and location fields before outputting them in page attributes, allowing users with a WP Directory Kit WordPress plugin before 1.5.8-specific listing-management role and without the unfilteredhtml...

CVE-2026-84096: Improper Neutralization of Input During Web Page Generation

The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on the AJAX handler that saves its review submission forms, and the nonce protecting it is generated for every visitor, allowing any authenticated user, such as a subscriber, to overwrite a live form with...

CVE-2026-16591: Improper Neutralization of Input During Web Page Generation

The WP Directory Kit WordPress plugin before 1.5.8 does not sanitize and escape some of its category and location fields before outputting them in page attributes, allowing users with a WP Directory Kit WordPress plugin before 1.5.8-specific listing-management role and without the unfilteredhtml...

PT-2026-99243

Name of the Vulnerable Software and Affected Versions wp-review-slider-pro versions prior to 12.7.12 Description The plugin fails to perform a capability check on the AJAX handler used to save review submission forms. Additionally, the nonce a unique token used to prevent replay attacks is...

PT-2026-99240

Name of the Vulnerable Software and Affected Versions WP Directory Kit WordPress plugin versions prior to 1.5.8 Description Insufficient sanitization and escaping of category and location fields before they are output in page attributes allows users with a listing-management role to perform Store...