Wp Yelp Review Slider Vulnerabilities

The WP Yelp Review Slider plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 8.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level acce...

CVSS:

4.9

Affected:

up to 8.1

Fixed in:

8.2

Disclosed:

Feb 23, 2025

CVE-2025-26946 on NVD →

The WP Yelp Review Slider plugin for WordPress is vulnerable to SQL Injection via the $tid value in versions up to, and including, 7.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with subscri...

CVSS:

8.8

Affected:

up to 7.0

Fixed in:

7.1

Disclosed:

Jan 23, 2023

CVE-2023-0263 on NVD →