CVE-2026-84097: WP Review Slider Pro < 12.7.12 - Subscriber+ SQLi via Stored Template Filter

Q: Which users can exploit this issue?

Any authenticated WordPress user can exploit it, including users with only the Subscriber role. The affected AJAX handler does not enforce a capability check.

Q: Can unauthenticated visitors be exposed to the attack results?

Yes. Although exploitation requires an authenticated user, the SQL injection results are returned to unauthenticated visitors.

Q: Which versions are affected?

Versions of WP Review Slider Pro before 12.7.12 are affected.

Published Sep 26, 2026

Updated

The wp-review-slider-pro WordPress plugin before 12.7.12 does not sanitize a value stored through one of its AJAX handlers, which lacks a capability check, before using it in a SQL statement, allowing any authenticated user, such as a subscriber, to perform SQL injection attacks whose results are then returned to unauthenticated visitors.

Affected Software

1 affected component

WP Review Slider Pro<12.7.12

Event History

Sep 26, 2026

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionWeakness

Frequently Asked Questions

Which users can exploit this issue?

Any authenticated WordPress user can exploit it, including users with only the Subscriber role. The affected AJAX handler does not enforce a capability check.

Can unauthenticated visitors be exposed to the attack results?

Yes. Although exploitation requires an authenticated user, the SQL injection results are returned to unauthenticated visitors.

Which versions are affected?

Versions of WP Review Slider Pro before 12.7.12 are affected.