CVE-2026-66427
HighCVSS 7.6Summary
SQL Injection vulnerability in the admin panel of WP Google Review Slider plugin up to version 18.4. Allows an administrator to execute arbitrary SQL queries.
Risk Assessment
An attacker with admin privileges can gain unauthorized access to the WordPress database, potentially leading to data theft or site takeover.
Recommendation
Update the WP Google Review Slider plugin to the latest available version. Limit the number of admin accounts and apply the principle of least privilege.
Other vulnerabilities in WP Google Review Slider
See all- CVE-2026-66428Medium
The WP Google Review Slider plugin version 18.4 and earlier contains a Cross-Site Request Forgery (CSRF) vulnerability without authentication. An attacker can trick an administrator into performing unwanted actions.
- CVE-2026-39451Medium
The WP Google Review Slider plugin versions up to 18.0 contains an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious JavaScript code.
Original NVD description (English source)
Administrator SQL Injection in WP Google Review Slider <= 18.4 versions.