CVE-2026-66428

The WP Google Review Slider plugin versions up to 18.4 are vulnerable to an unauthenticated Cross-Site Request Forgery (CSRF) attack, which could allow an attacker to perform unauthorized actions on behalf of users without their consent. This vulnerability poses a medium risk, particularly for websites that utilize this plugin, as it could lead to unauthorized changes or data manipulation. Website administrators using this plugin should prioritize updating to a patched version to mitigate potential exploitation risks.