Skip to content
OpenAdvisories

Vendor

jgwhite33

16 known vulnerabilities.

Products

WP Google Review Slider 6 WP TripAdvisor Review Slider 3 WP Airbnb Review Slider 2 WP Yelp Review Slider 2 Google Review Slider 1 WP Review Slider 1 WP Thumbtack Review Slider 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.2
    CVE-2026-93778

    WP Yelp Review Slider <= 9.2 - Unauthenticated Stored Cross-Site Scripting via Yelp Review Text (imported via wpyelp_download_source)

    The WP Yelp Review Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Yelp Review Text (imported via wpyelp_download_source) in all versions up to, and including, 9.2 due to insufficient input sanitization and output escaping. This m…

    jgwhite33 WP Yelp Review Slider Web / CMS
  • High 7.6
    CVE-2026-66427

    WordPress WP Google Review Slider plugin <= 18.4 - SQL Injection vulnerability

    Administrator SQL Injection in WP Google Review Slider <= 18.4 versions.

    jgwhite33 WP Google Review Slider
  • High 8.2
    CVE-2019-25745

    WordPress Plugin Google Review Slider 6.1 SQL Injection via tid

    WordPress Plugin Google Review Slider 6.1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'tid' parameter. Attackers can send GET requests to the ad…

    jgwhite33 Google Review Slider Web / CMS
  • High 8.2
    CVE-2025-30783

    WordPress WP Google Review Slider plugin <= 16.0 - CSRF to SQL Injection vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in jgwhite33 WP Google Review Slider wp-google-places-review-slider allows SQL Injection.This issue affects WP Google Review Slider: from n/a through <= 16.0.

    jgwhite33 WP Google Review Slider
  • High 7.6
    CVE-2025-26946

    WordPress WP Yelp Review Slider Plugin <= 8.1 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jgwhite33 WP Yelp Review Slider wp-yelp-review-slider allows Blind SQL Injection.This issue affects WP Yelp Review Slider: from n/a through <= 8.1.

    jgwhite33 WP Yelp Review Slider
  • High 7.6
    CVE-2025-26755

    WordPress WP Airbnb Review Slider Plugin <= 3.9 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jgwhite33 WP Airbnb Review Slider wp-airbnb-review-slider allows Blind SQL Injection.This issue affects WP Airbnb Review Slider: from n/a through <= 3.9.

    jgwhite33 WP Airbnb Review Slider