Wp-review-slider-pro vulnerabilities
We track 2 vulnerabilities in Wp-review-slider-pro products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 26, 2026.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest Wp-review-slider-pro vulnerabilities
- 8.0 High severity
wp-review-slider-pro: Improper Neutralization of Input During Web Page Generation
The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on the AJAX handler that saves its review submission forms, and the nonce protecting it is generated for every visitor, allowing any authenticated user, such as a subs
- 8.0 High severity
wp-review-slider-pro: Improper Neutralization of Input During Web Page Generation
The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on one of its AJAX handlers, and the nonce protecting it is generated for every visitor, allowing any authenticated user, such as a subscriber, to store arbitrary revi