Verified Reviews Avis V Rifi S
Monthly
SQL injection in the Verified Reviews (Avis Vérifiés) WordPress plugin (slug 'netreviews') affects all versions up to and including 2.4.6, allowing unauthenticated remote attackers to inject arbitrary SQL into backend queries. Per the CVSS vector (PR:N, S:C), no login is required and the impact crosses into the underlying WordPress database, enabling extraction of sensitive data such as user credentials and secrets. No public exploit has been identified at time of analysis, though Patchstack has published the vulnerability record.
SQL injection in the Verified Reviews (Avis Vérifiés) WordPress plugin (slug 'netreviews') affects all versions up to and including 2.4.6, allowing unauthenticated remote attackers to inject arbitrary SQL into backend queries. Per the CVSS vector (PR:N, S:C), no login is required and the impact crosses into the underlying WordPress database, enabling extraction of sensitive data such as user credentials and secrets. No public exploit has been identified at time of analysis, though Patchstack has published the vulnerability record.