{"affected":[{"defaultStatus":"unaffected","product":"WP Google Review Slider","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"18.11","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-117588","cwes":["CWE-352"],"description":"The WP Google Review Slider WordPress plugin before 18.11 does not perform nonce validation when updating its active Google Places configuration, allowing attackers to alter or destroy that configuration via a forged request, provided they can trick a site administrator into following a crafted link.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/ba4a5e5a-68d2-4f56-bb49-ec03581885a0/"}],"kev":null,"metrics":[],"modifiedAt":1794031224996,"publishedAt":1794031224996,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/ba4a5e5a-68d2-4f56-bb49-ec03581885a0/"}],"remediation":[],"revision":"97a9f5fa10312c79f7eae3660ca4de0b24a8d80e3ce30493267b9d1874d51668","sources":[{"modifiedAt":1794031224996,"name":"CNA: WPScan","retrievedAt":1794031713025,"url":"https://www.cve.org/CVERecord?id=CVE-2026-117588"}],"ssvc":null,"status":"published","title":"WP Google Review Slider < 18.11 - Google API Settings Update via CSRF","updatedAt":1794031713025}