CVE-2025-26755

Summary

CVE-2025-26755 is a newly identified SQL Injection vulnerability affecting the WP Airbnb Review Slider plugin. This issue enables an attacker to perform blind SQL injection by improperly neutralizing special elements in SQL commands. The affected plugin versions span from n/a to 3.9. This vulnerability could potentially lead to unauthorized data access or even complete system compromise. Users are advised to update their WP Airbnb Review Slider plugin to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.