CVE-2026-8444 | WP Review Slider Pro Plugin up to 12.6.8 on WordPress AJAX Action get_results curselrevs sql injection

A vulnerability was found in WP Review Slider Pro Plugin up to 12.6.8 on WordPress. It has been rated as critical. This impacts the function get_results of the component AJAX Action Handler. Performing a manipulation of the argument curselrevs results in sql injection.

This vulnerability is cataloged as CVE-2026-8444. It is possible to initiate the attack remotely. There is no exploit available.