CVE-2026-66427

WordPress WP Google Review Slider plugin <= 18.4 - SQL Injection vulnerability

Administrator SQL Injection in WP Google Review Slider <= 18.4 versions.

We have discovered 8,641 live websites that are affected by CVE-2026-66427.

Run a Free Instant Scan



Affected Software

Product  Wp Google Places Review Slider
Category Wordpress Plugins
Vulnerable Domains8,641 live websites (100% of Wp Google Places Review Slider install base)
Vulnerable Versions
  • from 0 through 18.4
Vulnerable Versions Count85 versions ( 100% of all versions)


Common Weakness Enumeration

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')



Details

  • Published - Jul 27, 2026
  • Updated - Jul 27, 2026

Credits

  • Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-66427
United States3,250 websites


GB783 websites
Germany625 websites
France561 websites
Canada366 websites
Netherlands356 websites
Australia351 websites
Spain341 websites
Italy285 websites
Poland174 websites

Website Distribution by TLD

Number of websites using CVE-2026-66427
.com4,302 websites
.co.uk628 websites
.de403 websites
.com.au378 websites
.nl337 websites
.fr282 websites
.ca252 websites
.it208 websites
.es164 websites
.pl135 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-66427

Top websites that are affected by CVE-2026-66427. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*******.eu Netherlands***,***
********.com United States***,***
*****.**.uk GB***,***
*********.com United States***,***
*******************************.***.au Australia***,***
*************.com United States***,***
********.***.au Australia***,***
************.eu Italy***,***
*******.ee Estonia***,***
**********************.com Cyprus***,***
See full domain list

FAQ

CVE-2026-66427 is Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Wp Google Places Review Slider
A total of 8,641 websites have been identified as vulnerable to CVE-2026-66427, based on global website indexing conducted by WebTechSurvey.
The Wp Google Places Review Slider is affected by the CVE-2026-66427 vulnerability.
Wp Google Places Review Slider versions up to and including 18.4 are vulnerable to CVE-2026-66427.