Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-32491 EUVD-2026-15833GHSA-wg43-4pm5-2pqv

WordPress WP Review Slider plugin <= 13.9 - Cross Site Scripting (XSS) vulnerability

Published Mar 25, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jgwhite33 WP Review Slider wp-facebook-reviews allows Stored XSS.This issue affects WP Review Slider: from n/a through <= 13.9.

Affected products

VendorProductAffectedFixed
jgwhite33 WP Review Slider ≤ <= 13.9 —

References