Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: wp-review-slider-pro 12.7.12 Clear all filters
TI-2026-57826 CVE-2026-84097 · GHSA-8w5g-8jf5-frvg

WP Review Slider Pro < 12.7.12 - Subscriber+ SQLi via Stored Template Filter

Priority LOW 28

The wp-review-slider-pro WordPress plugin before 12.7.12 does not sanitize a value stored through one of its AJAX handlers, which lacks a capability check, before using it in a SQL statement, allowing any authenticated u…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00209 Published 2026-09-26 Fixed in 12.7.12 CWE-89
TI-2026-57825 CVE-2026-84096 · GHSA-hx67-pm9f-r3jv

WP Review Slider Pro < 12.7.12 - Subscriber+ Stored XSS via Review Form Fields

Priority LOW 36

The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on the AJAX handler that saves its review submission forms, and the nonce protecting it is generated for every visitor, allowin…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00219 Published 2026-09-26 Fixed in 12.7.12 CWE-79
TI-2026-57824 CVE-2026-84095 · GHSA-f57m-jfx5-32g7

WP Review Slider Pro < 12.7.12 - Subscriber+ Stored XSS via Review Import

Priority LOW 36

The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on one of its AJAX handlers, and the nonce protecting it is generated for every visitor, allowing any authenticated user, such…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00219 Published 2026-09-26 Fixed in 12.7.12 CWE-79