CVE Intelligence

Jgwhite33 WP Google Review Slider vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Jgwhite33 WP Google Review Slider: 5 record(s), with affected versions and fixes.

CVE-2026-66428 Medium · 4.3 CWE-352 Jul 27, 2026
WordPress WP Google Review Slider plugin <= 18.4 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery (CSRF) in WP Google Review Slider <= 18.4 versions.
CVE-2026-66427 High · 7.6 CWE-89 Jul 27, 2026
WordPress WP Google Review Slider plugin <= 18.4 - SQL Injection vulnerability
Administrator SQL Injection in WP Google Review Slider <= 18.4 versions.
CVE-2026-13015 Medium · 6.1 CWE-79 Jul 1, 2026
WP Google Review Slider <= 18.1 - Reflected Cross-Site Scripting via 'place' Parameter
The Wp Google Places Review Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'place' parameter in versions up to, and including, 18.1. This is due to insufficient input sanitization and output escaping in admin/partials/googlecrawl_dfs.php, where the $_GET['place'] value is URL-decoded, stripslashes()'d, and echoed directly into an HTML value attribute with no esc_attr() call when the supplied place is not already a stored key in the wprev_google_crawls option. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a specially crafted link.
CVE-2026-39451 Medium · 6.3 CWE-79 Jun 15, 2026
WordPress WP Google Review Slider plugin <= 18.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in WP Google Review Slider <= 18.0 versions.
CVE-2025-66063 Medium · 5.4 CWE-862 Nov 21, 2025
WordPress WP Google Review Slider plugin <= 17.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in jgwhite33 WP Google Review Slider wp-google-places-review-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Google Review Slider: from n/a through <= 17.4.