Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-09-22
Wp Yelp Review Slider - Security Vulnerability (CVE-2026-93778)
The WP Yelp Review Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Yelp Review Text (imported via wpyelp_download_source) in all versions up to, and including, 9.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The malicious payload originates from an anonymous Yelp reviewer on a public platform and requires no WordPress account; it is introduced into the database during the site administrator's ordinary…
PLUGIN
Wp Yelp Review Slider
CVE-2026-93778
Risk Score
Threat Entry
Updated 2026-06-17
Wp Yelp Review Slider - SQL Injection (CVE-2025-26946)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jgwhite33 WP Yelp Review Slider wp-yelp-review-slider allows Blind SQL Injection.This issue affects WP Yelp Review Slider: from n/a through
PLUGIN
Wp Yelp Review Slider
CVE-2025-26946
Risk Score
Threat Entry
Updated 2026-06-17
Wp Yelp Review Slider - SQL Injection (CVE-2023-0263)
The WP Yelp Review Slider WordPress plugin before 7.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.
PLUGIN
Wp Yelp Review Slider
CVE-2023-0263
Risk Score