CVE-2026-39451

MediumCVSS 6.3

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile — higher than 15% of all known CVEs

Summary

The WP Google Review Slider plugin versions up to 18.0 contains an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious JavaScript code.

Risk Assessment

This vulnerability may lead to user data theft and session hijacking, posing a serious threat to the application's security and the organization's data.

Recommendation

It is recommended to update the WP Google Review Slider plugin to the latest version to mitigate this security issue.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in WP Google Review Slider <= 18.0 versions.