CVE-2026-125711 | AliExpress Reviews Plugin up to 14.2 on WordPress cross site scripting

A vulnerability was found in AliExpress Reviews Plugin, Alibaba Reviews Plugin, Amazon Reviews Plugin, Arkereso Reviews Plugin, Airbnb Reviews Plugin, Booking.com Reviews Plugin, Capterra Reviews Plugin, Ebay Reviews Plugin, Expedia Reviews Plugin, Foursquare Reviews Plugin, Google Reviews Plugin, Hotels.com Reviews Plugin, Opentable Reviews Plugin, Reviews and Recommendations Plugin, Szallas.hu Reviews Plugin, Thumbtack Reviews Plugin, Tripadvisor Review Widgets Plugin, WordPress Reviews Plugin and Yelp Reviews Plugin up to 14.2 on WordPress. It has been rated as problematic. This affects an unknown part. The manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-125711. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More