Executive brief
The WP Review Slider Pro WordPress plugin contains an SQL injection vulnerability in an AJAX handler that lacks authentication and input sanitization. An authenticated user with even basic subscriber privileges can inject malicious SQL to extract data that is visible to unauthenticated visitors, bypassing normal access controls. This could lead to exposure of sensitive database information including user credentials, customer data, and configuration details.
Technical details
The vulnerability is a SQL injection (CWE-89) in an AJAX handler within wp-review-slider-pro that lacks both capability checks and input sanitization on stored values used in SQL statements. An authenticated user (subscriber or higher) can craft malicious SQL payloads through the handler, and the unsanitized results are returned to unauthenticated visitors, amplifying exposure. The issue was patched in version 12.7.12.
Affected products
- WP Review Slider Pro before 12.7.12
Timeline
- 2026-09-24: disclosed
- 2026-09-24: patched: version 12.7.12