Ljapps

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-11109 1Ljapps 1Wp Google Review Slider Jun 17, 2026 May 15, 2025 N/A· v4 4.8 MEDIUM· v3 N/A· v2 The WP Google Review Slider WordPress plugin before 15.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when th...Show more The WP Google Review Slider WordPress plugin before 15.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).Show less
CVE-2024-2310 1Ljapps 1Wp Google Review Slider Jun 17, 2026 Apr 26, 2024 N/A· v4 5.9 MEDIUM· v3 N/A· v2 The WP Google Review Slider WordPress plugin before 13.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when th...Show more The WP Google Review Slider WordPress plugin before 13.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)Show less
CVE-2023-51685 1Ljapps 1Wp Review Slider Jun 17, 2026 Feb 1, 2024 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LJ Apps WP Review Slider allows Stored XSS.This issue affects WP Review Slider: from n/a through 12.7.
CVE-2023-6456 1Ljapps 1Wp Review Slider Jun 17, 2026 Jan 22, 2024 N/A· v4 4.8 MEDIUM· v3 N/A· v2 The WP Review Slider WordPress plugin before 13.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfil...Show more The WP Review Slider WordPress plugin before 13.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)Show less
CVE-2023-6037 1Ljapps 1Wp Tripadvisor Review Slider Jun 17, 2026 Jan 1, 2024 N/A· v4 4.8 MEDIUM· v3 N/A· v2 The WP TripAdvisor Review Slider WordPress plugin before 11.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even wh...Show more The WP TripAdvisor Review Slider WordPress plugin before 11.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)Show less
CVE-2023-23890 1Ljapps 1Wp Airbnb Review Slider Jun 17, 2026 May 20, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Cross-Site Request Forgery (CSRF) vulnerability in LJ Apps WP Airbnb Review Slider plugin <= 3.2 versions.
CVE-2023-0263 1Ljapps 1Wp Yelp Review Slider Jun 17, 2026 Feb 13, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 The WP Yelp Review Slider WordPress plugin before 7.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber...Show more The WP Yelp Review Slider WordPress plugin before 7.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.Show less
CVE-2023-0262 1Ljapps 1Wp Airbnb Review Slider Jun 17, 2026 Feb 13, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 The WP Airbnb Review Slider WordPress plugin before 3.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscrib...Show more The WP Airbnb Review Slider WordPress plugin before 3.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.Show less
CVE-2023-0261 1Ljapps 1Wp Tripadvisor Review Slider Jun 17, 2026 Feb 13, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 The WP TripAdvisor Review Slider WordPress plugin before 10.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as su...Show more The WP TripAdvisor Review Slider WordPress plugin before 10.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.Show less
CVE-2023-0260 1Ljapps 1Wp Review Slider Jun 17, 2026 Feb 13, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 The WP Review Slider WordPress plugin before 12.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.
CVE-2023-0259 1Ljapps 1Wp Google Review Slider Jun 17, 2026 Feb 13, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 The WP Google Review Slider WordPress plugin before 11.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscri...Show more The WP Google Review Slider WordPress plugin before 11.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.Show less
CVE-2022-4242 1Ljapps 1Wp Google Review Slider Jun 17, 2026 Dec 26, 2022 N/A· v4 4.8 MEDIUM· v3 N/A· v2 The WP Google Review Slider WordPress plugin before 11.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when th...Show more The WP Google Review Slider WordPress plugin before 11.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).Show less
CVE-2022-0383 1Ljapps 1Wp Review Slider Jun 17, 2026 Feb 28, 2022 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 The WP Review Slider WordPress plugin before 11.0 does not sanitise and escape the pid parameter when copying a Twitter source, which could allow a high privilege users to perform SQL Injections attacks