Vulnerabilities and security researches forwp-google-places-review-slider wp-google-places-review-slider

Jun 06, 2024

CVE, Research URL: CVE-2023-0259
Home page URL: Security reports for WP Google Review Slider
Application: WP Google Review Slider
Date: Feb 13, 2023
Research Description: The WP Google Review Slider WordPress plugin before 11.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.
Affected versions: Min -, max -.
Status: vulnerable

CVE, Research URL: e42cedcff159170074fe08dcc12e3cd44aae4dcf
Home page URL: Security reports for WP Google Review Slider
Application: WP Google Review Slider
Date: Nov 01, 2019
Research Description: WP Google Review Slider [wp-google-places-review-slider] < 6.2 WordPress WP Google Review Slider <= 6.1 - Authenticated SQL Injection (SQLi) vulnerability Authenticated SQL Injection (SQLi) vulnerability found by Princy Edward in WordPress WP Google Review Slider (versions <= 6.1).
Affected versions: Min -, max -.
Status: vulnerable

CVE, Research URL: CVE-2022-4242
Home page URL: Security reports for WP Google Review Slider
Application: WP Google Review Slider
Date: Dec 26, 2022
Research Description: The WP Google Review Slider WordPress plugin before 11.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Affected versions: Min -, max -.
Status: vulnerable

CVE, Research URL: CVE-2024-2310
Home page URL: Security reports for WP Google Review Slider
Application: WP Google Review Slider
Date: Apr 26, 2024
Research Description: The WP Google Review Slider WordPress plugin before 13.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Affected versions: Min -, max -.
Status: vulnerable

Jul 24, 2024

PSC, Research URL: PSC-2024-64514
Home page URL: Security reports for WP Google Review Slider
Application: WP Google Review Slider
Date: -
Research Description: WP Google Review Slider is an essential tool for WordPress site owners looking to display their Google reviews quickly and effectively. With this plugin, you can effortlessly showcase your hard-earned 5-star reviews in a stylish slider or responsive grid. This not only boosts customer confidence but also enhances social proof, ultimately driving more sales.
Affected versions: Min -, max -.
Status: SAFE & CERTIFIED

Mar 28, 2025

CVE, Research URL: CVE-2025-30783
Home page URL: Security reports for WP Google Review Slider
Application: WP Google Review Slider
Date: Mar 27, 2025
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in jgwhite33 WP Google Review Slider allows SQL Injection. This issue affects WP Google Review Slider: from n/a through 16.0.
Affected versions: Min -, max -.
Status: vulnerable