The WP Review Slider Pro WordPress plugin (<=12.6.8) is vulnerable to SQL Injection through the 'curselrevs[]' parameter in the wpfb_find_reviews AJAX action. The plugin reads the $_POST['curselrevs'] array without sanitization or type casting and concatenates its elements directly into a SQL WHERE clause without quoting or using $wpdb->prepare(), allowing authenticated attackers with Subscriber-level privileges or higher to append arbitrary SQL commands. This vulnerability can lead to unauthorized disclosure of sensitive database information. The CVSS 3.1 base score is 8.8, reflecting high impact on confidentiality, integrity, and availability. No official fix or patch has been documented as of the publication date.

Successful exploitation allows authenticated users with low privileges (Subscriber-level and above) to perform SQL Injection attacks, potentially leading to unauthorized disclosure of sensitive data, modification of database contents, and disruption of availability. The vulnerability affects the confidentiality, integrity, and availability of the affected WordPress site’s database.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict or monitor access to the affected AJAX action for untrusted users and consider disabling the WP Review Slider Pro plugin if feasible. Avoid granting Subscriber-level or higher privileges to untrusted users. Monitor for updates from the vendor regarding patches or official mitigations.