8.8
Élevée
CVE-2023-0259 The WP Google Review Slider WordPress plugin before 11.8 does not properly sanitise and escape a parameter before…
Description
The WP Google Review Slider WordPress plugin before 11.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Google Review Slider 11.8 | premières → < 11.8 | 11.8 |
Autres CVE de WP Google Review Slider
Les 5 CVE de WP Google Review Slider →
CVE-2026-117588
WP Google Review Slider < 18.11 - Google API Settings Update via CSRF
4.3
Moyenne
CVE-2024-11109
The WP Google Review Slider WordPress plugin before 15.6 does not sanitise and escape some of its settings, which…
4.8
Moyenne
CVE-2024-2310
The WP Google Review Slider WordPress plugin before 13.6 does not sanitise and escape some of its settings, which…
5.9
Moyenne
CVE-2022-4242
The WP Google Review Slider WordPress plugin before 11.6 does not sanitise and escape some of its settings, which…
4.8
Moyenne