8.8
High
CVE-2023-0259 The WP Google Review Slider WordPress plugin before 11.8 does not properly sanitise and escape a parameter before…
Description
The WP Google Review Slider WordPress plugin before 11.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Google Review Slider 11.8 | earliest → < 11.8 | 11.8 |
Other CVEs of WP Google Review Slider
The 5 CVEs of WP Google Review Slider →
CVE-2026-117588
WP Google Review Slider < 18.11 - Google API Settings Update via CSRF
4.3
Medium
CVE-2024-11109
The WP Google Review Slider WordPress plugin before 15.6 does not sanitise and escape some of its settings, which…
4.8
Medium
CVE-2024-2310
The WP Google Review Slider WordPress plugin before 13.6 does not sanitise and escape some of its settings, which…
5.9
Medium
CVE-2022-4242
The WP Google Review Slider WordPress plugin before 11.6 does not sanitise and escape some of its settings, which…
4.8
Medium