Plugin icon

WP Google Review Slider

wp-google-places-review-slider

Vulnerabilities:

13

Last Updated:

August 11, 2026

Active Installs:

30000

Published
Title
Fixed in
CVSS
Published
2026-07-27
Title
Google Review Slider < 18.5 - Authenticated (Administrator+) SQL Injection
Fixed in
Fixed in 18.5
CVSS
4.9 (medium)
Published
2026-07-27
Title
Google Review Slider < 18.5 - Cross-Site Request Forgery
Fixed in
Fixed in 18.5
CVSS
4.3 (medium)
Published
2026-06-30
Title
WP Google Review Slider < 18.2 - Reflected Cross-Site Scripting via 'place' Parameter
Fixed in
Fixed in 18.2
CVSS
6.1 (medium)
Published
2026-06-04
Title
WP Google Review Slider <= 6.1 - Unauthenticated SQL Injection
Fixed in
No known fix
CVSS
7.5 (high)
Published
2026-06-01
Title
WP Google Review Slider < 18.1 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 18.1
CVSS
7.2 (high)
Published
2025-11-14
Title
Google Review Slider < 17.6 - Missing Authorization
Fixed in
Fixed in 17.6
CVSS
4.3 (medium)
Published
2025-03-27
Title
WP Google Review Slider < 16.1 - Cross-Site Request Forgery to SQL Injection
Fixed in
Fixed in 16.1
CVSS
4.3 (medium)
Published
2024-11-05
Title
WP Google Review Slider < 15.6 - Admin+ Stored XSS
Fixed in
Fixed in 15.6
CVSS
3.5 (low)
Published
2024-04-05
Title
WP Google Review Slider < 13.6 - Admin+ Stored XSS
Fixed in
Fixed in 13.6
CVSS
3.5 (low)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 12.6
CVSS
6.1 (medium)
Published
2023-01-23
Title
WP Google Review Slider < 11.8 - Subscriber+ SQLi
Fixed in
Fixed in 11.8
CVSS
7.7 (high)
Published
2022-12-02
Title
WP Google Review Slider < 11.6 - Admin+ Stored XSS
Fixed in
Fixed in 11.6
CVSS
3.4 (low)
Published
2019-10-31
Title
WP Google Review Slider <= 6.1 - Authenticated SQL Injection
Fixed in
Fixed in 6.2
CVSS
n/a