CVE-2026-117588
WP Google Review Slider < 18.11 - Google API Settings Update via CSRF
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The WP Google Review Slider WordPress plugin before 18.11 does not perform nonce validation when updating its active Google Places configuration, allowing attackers to alter or destroy that configuration via a forged request, provided they can trick a site administrator into following a crafted link.
| Vendor | unknown |
| Product | wp google review slider |
| Published | Nov 7, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown wp google review slider
Be the first to know when new unknown vulnerabilities affecting unknown wp google review slider are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / WP Google Review Slider
0 < 18.11
References
Credits
Abdullah Kareem WPScan