Unknown Wp-Review-Slider-Pro vulnerabilities

3 CVEs affecting Unknown Wp-Review-Slider-Pro, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-84097, published 2026-09-26.

More from Unknown.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-84096, published 2026-09-26. High severity, CVSS 8.0. EPSS: 0.2% chance of exploitation in the next 30 days. The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on the AJAX handler that saves its review submission forms, and the nonce protecting it is generated for…
• CVE-2026-84095, published 2026-09-26. High severity, CVSS 8.0. EPSS: 0.2% chance of exploitation in the next 30 days. The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on one of its AJAX handlers, and the nonce protecting it is generated for every visitor, allowing any…
• CVE-2026-84097, published 2026-09-26. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. The wp-review-slider-pro WordPress plugin before 12.7.12 does not sanitize a value stored through one of its AJAX handlers, which lacks a capability check, before using it in a SQL statement,…