What is the CVSS score of CVE-2026-11969?

CVE-2026-11969 has a CVSS 3.1 base score of 4.9 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.3%.

WP TripAdvisor Review Slider CVE-2026-11969

EUVD-2026-53286 MEDIUM

SQL Injection (CWE-89)

2026-08-05 Wordfence

GHSA-r22w-8f3w-6vr6

WordPress SQLi Wp Tripadvisor Review Slider Wordpress Plugin Jgwhite33

4.9

CVSS 3.1 · Vendor: Wordfence

Severity by source

Vendor (Wordfence) PRIMARY

4.9 MEDIUM

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

4.9 MEDIUM

Administrator credentials required for exploitation (PR:H); read-only SQL injection yields confidentiality impact only, with no integrity or availability effects confirmed.

3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (Wordfence).

CVSS VectorVendor: Wordfence

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 05, 2026 - 08:39 vuln.today

CVE Published

Aug 05, 2026 - 07:39 nvd

MEDIUM 4.9

DescriptionCVE.org

The WP TripAdvisor Review Slider plugin for WordPress is vulnerable to generic SQL Injection via 'curselrevs[]' Parameter in all versions up to, and including, 14.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

AnalysisAI

SQL injection in the WP TripAdvisor Review Slider WordPress plugin (all versions through 14.3) enables authenticated administrators to extract arbitrary data from the underlying WordPress database via a maliciously crafted curselrevs[] array parameter. The flaw stems from insufficient escaping and improper SQL query preparation in the plugin's admin-side code, documented at specific lines in the plugin's source on the WordPress repository. No active exploitation is confirmed (not in CISA KEV) and no public exploit code has been identified; real-world risk is substantially constrained by the administrator-level privilege requirement reflected in the CVSS 4.9 Medium score.

Technical ContextAI

The affected product is identified by CPE cpe:2.3:a:jgwhite33:wp_tripadvisor_review_slider:*:*:*:*:*:*:*:*, a WordPress plugin by developer jgwhite33 that embeds TripAdvisor review widgets. The root cause is CWE-89 (Improper Neutralization of Special Elements used in an SQL Command): the plugin accepts an array-type POST parameter curselrevs[] and concatenates its contents into an SQL query without parameterization or adequate escaping. Vulnerable code paths are pinpointed in the WordPress plugin Trac repository at admin/class-wp-tripadvisor-review-slider-admin.php lines 599 and 671, and includes/class-wp-tripadvisor-review-slider.php line 285. This is an append-style injection pattern where attacker-controlled values extend an existing query, enabling UNION- or stacked-query-based data extraction.

RemediationAI

Update the WP TripAdvisor Review Slider plugin to version 14.4 or later. The WordPress plugin repository changeset at https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3570513%40wp-tripadvisor-review-slider%2Ftags%2F14.4%2Fadmin%2Fclass-wp-tripadvisor-review-slider-admin.php&old=3549944%40wp-tripadvisor-review-slider%2Ftags%2F14.3%2Fadmin%2Fclass-wp-tripadvisor-review-slider-admin.php&sfp_email=&sfph_mail= shows the code changes applied in the 14.4 tag relative to 14.3, strongly indicating 14.4 is the remediated release; however, this has not been independently confirmed via a formal vendor advisory. As a compensating control for environments unable to upgrade immediately, restrict WordPress administrator role assignment to the minimum required set of trusted accounts and enforce multi-factor authentication on all admin accounts - this reduces the risk of credential compromise enabling exploitation, but does not eliminate the underlying SQL injection flaw. Consult the Wordfence advisory for the latest patch status.