WP Review Slider Pro

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   WP Review Slider Pro

Information

Software Type Plugin
Software Slug wp-review-slider-pro
Software Status Active
Software Author https://wpreviewslider.com/
Software Website wpreviewslider.com
Software Record Last Updated May 21, 2026

7 Vulnerabilities

Submit a Vulnerability
Review Slider Pro <= 12.7.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2026-84095
Sep 24, 2026
Researcher: Erwan LR
Review Slider Pro <= 12.7.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2026-84096
Sep 24, 2026
Researcher: Erwan LR
Review Slider Pro <= 12.7.11 - Authenticated (Subscriber+) SQL Injection
6.5
CVE-2026-84097
Sep 24, 2026
Researcher: Erwan LR
WP Review Slider Pro <= 12.7.2 - Unauthenticated SQL Injection via 'notinstring' Parameter
7.5
CVE-2026-8441
Jul 1, 2026
Researcher: h0xilo
WP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) Arbitrary File Deletion via 'myaction' Parameter
8.1
CVE-2026-8442
Jun 15, 2026
Researcher: h0xilo
WP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) SQL Injection via 'curselrevs' Parameter
8.8
CVE-2026-8444
Jun 15, 2026
Researcher: h0xilo
WP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) SQL Injection via 'stypes' Parameter
8.8
CVE-2026-8443
Jun 15, 2026
Researcher: h0xilo
Title Status CVE ID CVSS Researchers Date
Review Slider Pro <= 12.7.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting Patched CVE-2026-84095 6.4 Erwan LR September 24, 2026
Review Slider Pro <= 12.7.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting Patched CVE-2026-84096 6.4 Erwan LR September 24, 2026
Review Slider Pro <= 12.7.11 - Authenticated (Subscriber+) SQL Injection Patched CVE-2026-84097 6.5 Erwan LR September 24, 2026
WP Review Slider Pro <= 12.7.2 - Unauthenticated SQL Injection via 'notinstring' Parameter Patched CVE-2026-8441 7.5 h0xilo July 1, 2026
WP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) Arbitrary File Deletion via 'myaction' Parameter Patched CVE-2026-8442 8.1 h0xilo June 15, 2026
WP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) SQL Injection via 'curselrevs' Parameter Patched CVE-2026-8444 8.8 h0xilo June 15, 2026
WP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) SQL Injection via 'stypes' Parameter Patched CVE-2026-8443 8.8 h0xilo June 15, 2026

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation