CVE-2026-84096
wp-review-slider-pro: WP Review Slider Pro < 12.7.12 - Subscriber+ Stored XSS via Review Form Fields
Unknown wp-review-slider-pro
CVSS
8.0HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.23%Chance of exploitation activity in the next 30 days, higher than 12% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 12.7.12wp-review-slider-proCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on the AJAX handler that saves its review submission forms, and the nonce protecting it is generated for every visitor, allowing any authenticated user, such as a subscriber, to overwrite a live form with field values that are output without escaping on public pages, leading to Stored Cross-Site Scripting.
Text from CVE List
Affected versions 1
- wp-review-slider-proaffected: all versions before 12.7.12CVE List