CVE-2026-93778

The WP Yelp Review Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Yelp Review Text imported via wpyelpdownloadsource in all versions up to, and including, 9.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2026-93778

CVE-2026-93778 affects the WP Yelp Review Slider WordPress plugin in all versions up to and including 9.2 . The vulnerability is a stored cross-site scripting (XSS) flaw in the wpyelp_download_source function, caused by insufficient input sanitization and output escaping of Yelp review text. An u...