SQL Injection Vulnerability in WP Yelp Review Slider from jgwhite33

CVE-2025-26946

Summary

An SQL Injection vulnerability exists in the WP Yelp Review Slider plugin developed by jgwhite33. This vulnerability arises from improper sanitization of special elements used in SQL commands, leading to the potential for Blind SQL Injection attacks. It affects versions of the plugin from an unspecified release up to and including version 8.1. Attackers could exploit this flaw to manipulate database queries, potentially gaining unauthorized access to sensitive information stored in the database. Users are urged to evaluate their installations and apply necessary security updates to mitigate this risk.

References