CVE-2024-2310

The WP Google Review Slider WordPress plugin, in versions prior to 13.6 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain plugin settings. This flaw allows high-privilege users, such as administrators, to perform XSS attac...

CVE-2022-4242

The CVE-2022-4242 entry concerns the WP Google Review Slider WordPress plugin before version 11.6, where the plugin does not sanitize and escape certain settings. This can permit stored XSS attacks by high-privilege users (e.g., administrators), even when unfiltered_html is disallowed (such as in...

CVE-2023-0259

The CVE-2023-0259 entry concerns the WP Google Review Slider WordPress plugin, version(s) prior to 11.8. The vulnerability stems from improper sanitization/escaping of a parameter before it is used in a SQL statement, enabling SQL injection. It is exploitable by users with a role as low as subscr...

CVE-2024-11109

The WP Google Review Slider WordPress plugin (versions prior to 15.6 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain plugin settings. This vulnerability allows high-privilege users, such as administrators, to execute XSS...