jgwhite33
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP Google Review Slider | 6 | – | Jul 27, 2026 |
| WP TripAdvisor Review Slider | 3 | – | Aug 5, 2026 |
| WP Airbnb Review Slider | 2 | – | Nov 7, 2025 |
| WP Yelp Review Slider | 2 | – | Sep 22, 2026 |
| WP Review Slider | 1 | – | Mar 25, 2026 |
| WP Thumbtack Review Slider | 1 | – | Aug 27, 2025 |
Exploited and recent CVEs
- CVE-2026-93778 WP Yelp Review Slider <= 9.2 - Unauthenticated Stored Cross-Site Scripting via Yelp Review Text (imported via wpyelp_download_source) 0.4%
- CVE-2026-11969 WP TripAdvisor Review Slider <= 14.3 - Authenticated (Administrator+) SQL Injection 0.5%
- CVE-2026-66428 WordPress WP Google Review Slider plugin <= 18.4 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
- CVE-2026-66427 WordPress WP Google Review Slider plugin <= 18.4 - SQL Injection vulnerability 0.4%
- CVE-2026-15651 WP TripAdvisor Review Slider <= 14.6 - Authenticated (Administrator+) SQL Injection via 'filtersource' Parameter 0.5%
- CVE-2026-13015 WP Google Review Slider <= 18.1 - Reflected Cross-Site Scripting via 'place' Parameter 0.4%
- CVE-2026-39451 WordPress WP Google Review Slider plugin <= 18.0 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-32491 WordPress WP Review Slider plugin <= 13.9 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-32490 WordPress WP TripAdvisor Review Slider plugin <= 14.1 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-66063 WordPress WP Google Review Slider plugin <= 17.4 - Broken Access Control vulnerability 0.3%
- CVE-2025-12520 WP Airbnb Review Slider <= 4.2 - Authenticated (Admin+) Stored Cross-Site Scripting 0.2%
- CVE-2025-58216 WordPress WP Thumbtack Review Slider Plugin <= 2.6 - Cross Site Scripting (XSS) Vulnerability 0.2%
- CVE-2025-30783 WordPress WP Google Review Slider plugin <= 16.0 - CSRF to SQL Injection vulnerability 0.2%
- CVE-2025-26946 WordPress WP Yelp Review Slider Plugin <= 8.1 - SQL Injection vulnerability 0.5%
- CVE-2025-26755 WordPress WP Airbnb Review Slider Plugin <= 3.9 - SQL Injection vulnerability 0.4%