Approved changes feed: RSS · Atom

cpe:2.3:a:jgwhite33:wp_airbnb_review_slider:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJgwhite33 (d43f9fe0-254f-578c-8da2-ef63d890e71b)
ProductWp Airbnb Review Slider (99868c84-ec5a-591c-a5eb-3b033f1055ff)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-26755 vulnerable 2026-06-08 07:14:50.394370 WordPress WP Airbnb Review Slider Plugin <= 3.9 - SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jgwhite33 WP Airbnb Review Slider wp-airbnb-review-slider allows Blind SQL Injection.This issue affects WP Airbnb Review Slider: from n/a through <= 3.9.
Published: 2025-02-16T22:17:17.991Z
Updated: 2026-04-28T16:11:40.028Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12520 vulnerable 2026-06-08 07:04:30.368668 WP Airbnb Review Slider <= 4.2 - Authenticated (Admin+) Stored Cross-Site Scripting
MEDIUM (4)
The WP Airbnb Review Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.2 due to insufficient URL validation that allows users to pull in a malicious HTML file. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
Published: 2025-11-07T05:29:57.900Z
Updated: 2026-04-08T16:56:37.713Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.