Product
The WP Yelp Review Slider WordPress plugin is vulnerable to Stored Cross-Site Scripting (CVE-2026-93778) via insufficient sanitization of imported Yelp review text, allowing unauthenticated attackers to execute arbitrary scripts in victim browsers.