Wp Yelp Review Slider
Approved changes feed: RSS · Atom
cpe:2.3:a:jgwhite33:wp_yelp_review_slider:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Jgwhite33 (d43f9fe0-254f-578c-8da2-ef63d890e71b) |
|---|---|
| Product | Wp Yelp Review Slider (afcae18d-cea3-57d1-bf45-3d0ad6a33f68) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-93778 |
vulnerable | 2026-10-13 12:28:56.053082 |
WP Yelp Review Slider <= 9.2 - Unauthenticated Stored Cross-Site Scripting via Yelp Review Text (imported via wpyelp_download_source)
HIGH (7.2)
The WP Yelp Review Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Yelp Review Text (imported via wpyelp_download_source) in all versions up to, and including, 9.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The malicious payload originates from an anonymous Yelp reviewer on a public platform and requires no WordPress account; it is introduced into the database during the site administrator's ordinary use of the plugin's Download Reviews feature, making the effective attacker unauthenticated.
Published: 2026-09-22T07:41:13.965Z
Updated: 2026-09-22T10:25:31.995Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26946 |
vulnerable | 2026-06-08 07:14:50.712777 |
WordPress WP Yelp Review Slider Plugin <= 8.1 - SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jgwhite33 WP Yelp Review Slider wp-yelp-review-slider allows Blind SQL Injection.This issue affects WP Yelp Review Slider: from n/a through <= 8.1.
Published: 2025-02-25T14:17:56.024Z
Updated: 2026-04-28T16:11:44.628Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.