The WP Google Review Slider plugin by jgwhite33 contains a CSRF vulnerability that enables an attacker to execute SQL Injection attacks. This affects all versions up to 16.0. The vulnerability allows remote attackers to induce authenticated users to perform unintended actions, resulting in potential compromise of database integrity. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, high confidentiality impact, no integrity impact, and low availability impact.

Successful exploitation could lead to unauthorized SQL Injection, potentially exposing or manipulating sensitive data in the plugin's database. Confidentiality impact is high, while integrity is not affected and availability impact is low. This could compromise the confidentiality of data managed by the plugin.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently available. Until a patch is released, consider disabling or removing the affected plugin to mitigate risk.