CVE-2024-2310

The CVE-2024-2310 entry concerns the WP Google Review Slider WordPress plugin (versions before 13.6). It states that certain settings are not sanitised/escaped, enabling Stored Cross-Site Scripting by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (including multisite...

CVE-2022-4242

The CVE-2022-4242 entry concerns the WP Google Review Slider WordPress plugin before version 11.6, where the plugin does not sanitize and escape certain settings. This can permit stored XSS attacks by high-privilege users (e.g., administrators), even when unfiltered_html is disallowed (such as in...

CVE-2023-0259

The CVE-2023-0259 entry concerns the WP Google Review Slider WordPress plugin, version(s) prior to 11.8. The vulnerability stems from improper sanitization/escaping of a parameter before it is used in a SQL statement, enabling SQL injection. It is exploitable by users with a role as low as subscr...

CVE-2024-11109

The WP Google Review Slider WordPress plugin before version 15.6 does not sanitize and escape some settings, allowing high-privilege users (e.g., admins) to perform Stored Cross-Site Scripting even when unfiltered_html is disallowed (including multisite setups). Affected component: plugin setting...