WordPress plugin
WP Review Slider Pro security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 7 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High4
- Medium3
- Low0
All WP Review Slider Pro vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Subscriber+) Stored Cross-Site Scripting ≤12.7.11Update to 12.7.12 | CVE-2026-84096 | |
| Medium6.4 | Authenticated (Subscriber+) Stored Cross-Site Scripting ≤12.7.11Update to 12.7.12 | CVE-2026-84095 | |
| Medium6.5 | Authenticated (Subscriber+) SQL Injection ≤12.7.11Update to 12.7.12 | CVE-2026-84097 | |
| High7.5 | Unauthenticated SQL Injection via 'notinstring' Parameter ≤12.7.2Update to 12.7.3 | CVE-2026-8441 | |
| High8.1 | Authenticated (Subscriber+) Arbitrary File Deletion via 'myaction' Parameter ≤12.6.8Update to 12.7.0 | CVE-2026-8442 | |
| High8.8 | Authenticated (Subscriber+) SQL Injection via 'curselrevs' Parameter ≤12.6.8Update to 12.7.0 | CVE-2026-8444 | |
| High8.8 | Authenticated (Subscriber+) SQL Injection via 'stypes' Parameter ≤12.6.8Update to 12.7.0 | CVE-2026-8443 |
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
≤12.7.11Update to 12.7.12
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
≤12.7.11Update to 12.7.12
- Medium6.5Authenticated (Subscriber+) SQL Injection
≤12.7.11Update to 12.7.12
- High7.5Unauthenticated SQL Injection via 'notinstring' Parameter
≤12.7.2Update to 12.7.3
- High8.1Authenticated (Subscriber+) Arbitrary File Deletion via 'myaction' Parameter
≤12.6.8Update to 12.7.0
- High8.8Authenticated (Subscriber+) SQL Injection via 'curselrevs' Parameter
≤12.6.8Update to 12.7.0
- High8.8Authenticated (Subscriber+) SQL Injection via 'stypes' Parameter
≤12.6.8Update to 12.7.0
WP Review Slider Pro: common questions
Does WP Review Slider Pro have known vulnerabilities?
Yes. VulnCrest Radar lists 7 known vulnerabilities in WP Review Slider Pro: 4 high, 3 medium. None are known to affect version null.
How do I check which version of WP Review Slider Pro I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP Review Slider Pro vulnerability?
CVE-2026-84096, published Sep 24, 2026: Review Slider Pro <= 12.7.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any WP Review Slider Pro vulnerability listed in CISA KEV?
No. None of the known WP Review Slider Pro vulnerabilities is currently listed in the CISA KEV catalog.