Description
Subscriber SQL Injection in Reviewer <= 3.14.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MVPThemes | Reviewer | ≤ 3.14.2 | — |
High · 8.5
CVE-2026-66658
EUVD-2026-57897GHSA-vwxj-24jr-658r
WordPress Reviewer plugin <= 3.14.2 - SQL Injection vulnerability
Published Aug 13, 2026 · Updated Aug 13, 2026 · Assigned by Patchstack