CVE-2026-39451 jgwhite33 CVE debrief

Who should care

Defenders responsible for WordPress installations with WP Google Review Slider plugin versions <= 18.0 should assess exposure and prioritize verification and potential updates.

Why it matters

CVE-2026-39451 is a MEDIUM severity vulnerability in WP Google Review Slider plugin versions <= 18.0 that requires verification of exposure and potential updates to prevent Cross Site Scripting (XSS) attacks.

• Potential for Cross Site Scripting (XSS) attacks
• Verification of plugin version and exposure required
• Prioritization of updates to >= 18.1 if necessary

Technical summary

CVE-2026-39451 is a MEDIUM severity Unauthenticated Cross Site Scripting (XSS) vulnerability in WP Google Review Slider plugin versions <= 18.0. The vulnerability has a CVSS score of 6.3 and a CVSS severity of MEDIUM.

Defensive priority

Defenders should prioritize verifying exposure of WP Google Review Slider plugin versions <= 18.0 and assessing the potential for Cross Site Scripting (XSS) attacks.

Recommended defensive actions

• Verify WP Google Review Slider plugin version and assess exposure
• Review and update plugin versions to >= 18.1 if necessary
• Monitor for potential Cross Site Scripting (XSS) attacks

Evidence notes

The CVE record and NVD detail page provide official vulnerability metadata. However, the scope of affected versions and potential impact require further verification.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.