wp_google_review_slider Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/wp_google_review_slider/ Thu, 23 Feb 2023 05:21:00 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png wp_google_review_slider Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/wp_google_review_slider/ 32 32 CVE-2022-4242 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-4242/ Thu, 23 Feb 2023 05:21:00 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-4242/ The WP Google Review Slider WordPress plugin before 11.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

The post CVE-2022-4242 appeared first on CVE Vulnerability.

]]> The WP Google Review Slider WordPress plugin before 11.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

The post CVE-2022-4242 appeared first on CVE Vulnerability.

]]> CVE-2023-0259 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0259/ Wed, 22 Feb 2023 14:02:12 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0259 The WP Google Review Slider WordPress plugin before 11.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.

The post CVE-2023-0259 appeared first on CVE Vulnerability.

]]> The WP Google Review Slider WordPress plugin before 11.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.

The post CVE-2023-0259 appeared first on CVE Vulnerability.

]]>