{"id":"CVE-2026-117588","published":"2026-11-07T06:16:57.037","lastModified":"2026-11-10T16:28:46.510","description":"The WP Google Review Slider WordPress plugin before 18.11 does not perform nonce validation when updating its active Google Places configuration, allowing attackers to alter or destroy that configuration via a forged request, provided they can trick a site administrator into following a crafted link.","cvssScore":4.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cwes":["CWE-352"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/ba4a5e5a-68d2-4f56-bb49-ec03581885a0/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}