Unknown Wp Google Review Slider vulnerabilities
4 known vulnerabilities affecting unknown/wp_google_review_slider.
Total CVEs
4
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM3
Vulnerabilities
Page 1 of 1
CVE-2024-11109MEDIUMCVSS 4.8fixed in 15.62025-05-15
CVE-2024-11109 [MEDIUM] CWE-79 CVE-2024-11109: The WP Google Review Slider WordPress plugin before 15.6 does not sanitise and escape some of its se
The WP Google Review Slider WordPress plugin before 15.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
cvelistv5nvd
CVE-2024-2310MEDIUMCVSS 5.9fixed in 13.62024-04-26
CVE-2024-2310 [MEDIUM] CWE-79 CVE-2024-2310: The WP Google Review Slider WordPress plugin before 13.6 does not sanitise and escape some of its se
The WP Google Review Slider WordPress plugin before 13.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
cvelistv5nvd
CVE-2023-0259HIGHCVSS 8.8fixed in 11.82023-02-13
CVE-2023-0259 [HIGH] CWE-89 CVE-2023-0259: The WP Google Review Slider WordPress plugin before 11.8 does not properly sanitise and escape a par
The WP Google Review Slider WordPress plugin before 11.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.
cvelistv5nvd
CVE-2022-4242MEDIUMCVSS 4.8fixed in 11.62022-12-26
CVE-2022-4242 [MEDIUM] CWE-79 CVE-2022-4242: The WP Google Review Slider WordPress plugin before 11.6 does not sanitise and escape some of its se
The WP Google Review Slider WordPress plugin before 11.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
cvelistv5nvd