Advisories · Technology
https://wpreviewslider.com/ WP Review Slider Pro.
Every CVE that names https://wpreviewslider.com/ WP Review Slider Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
WP Review Slider Pro <= 12.7.2 - Unauthenticated SQL Injection via 'notinstring' Parameter
- https://wpreviewslider.com/ WP Review Slider Pro
- SQL injection
- CVSS 8.1 High
WP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) Arbitrary File Deletion via 'myaction' Parameter
- https://wpreviewslider.com/ WP Review Slider Pro
- Path traversal
- CVSS 8.8 High
WP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) SQL Injection via 'curselrevs' Parameter
- https://wpreviewslider.com/ WP Review Slider Pro
- SQL injection
- CVSS 8.8 High
WP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) SQL Injection via 'stypes' Parameter
- https://wpreviewslider.com/ WP Review Slider Pro
- SQL injection