Wp Yelp Review Slider
Monthly
Stored cross-site scripting in the WP Yelp Review Slider WordPress plugin (all versions up to and including 9.2) lets an unauthenticated attacker plant arbitrary JavaScript that executes in the browser of anyone viewing a page that renders the affected review slider. The payload enters through the Yelp review text pulled in by the plugin's Download Reviews import routine (wpyelp_download_source), so an anonymous party simply publishes a booby-trapped review on the target business's public Yelp listing and waits for a site administrator to import it; no WordPress account on the victim site is needed. This is a conditional, not internet-scale, risk: exploitation requires the admin to actually run an import, and code only fires for subsequent visitors to the affected page, so sites that never import reviews or that have updated past the vulnerable builds are not exposed. No public exploit code was identified at time of analysis and the issue is not in CISA KEV.
The WP Yelp Review Slider WordPress plugin before 7.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Stored cross-site scripting in the WP Yelp Review Slider WordPress plugin (all versions up to and including 9.2) lets an unauthenticated attacker plant arbitrary JavaScript that executes in the browser of anyone viewing a page that renders the affected review slider. The payload enters through the Yelp review text pulled in by the plugin's Download Reviews import routine (wpyelp_download_source), so an anonymous party simply publishes a booby-trapped review on the target business's public Yelp listing and waits for a site administrator to import it; no WordPress account on the victim site is needed. This is a conditional, not internet-scale, risk: exploitation requires the admin to actually run an import, and code only fires for subsequent visitors to the affected page, so sites that never import reviews or that have updated past the vulnerable builds are not exposed. No public exploit code was identified at time of analysis and the issue is not in CISA KEV.
The WP Yelp Review Slider WordPress plugin before 7.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.