CVE-2026-117588

CVE-2026-117588CVE-2026-117588

Description

The WP Google Review Slider WordPress plugin before 18.11 does not perform nonce validation when updating its active Google Places configuration, allowing attackers to alter or destroy that configuration via a forged request, provided they can trick a site administrator into following a crafted link.

Scoring

CVSS 4.3 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Last modified2026-11-07
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.