CVE-2026-15651

Name of the Vulnerable Software and Affected Versions WP TripAdvisor Review Slider versions prior to 14.7

Description Insufficient escaping of user-supplied input and lack of proper preparation in SQL queries allow authenticated attackers with administrator-level access and above to perform a generic SQL Injection. By manipulating the filtersource parameter, an attacker can append additional SQL queries to extract sensitive information from the database.

Recommendations Update WP TripAdvisor Review Slider to version 14.7 or later. As a temporary mitigation, restrict access to the administrative functions that utilize the filtersource parameter.