External risk intelligence

Verified Reviews SQL Injection Vulnerability

CVE advisorySeverity: CRITICAL (CVSS 9.3)

CVE-2026-81800

The vulnerability affects a web plugin designed for customer reviews. Such components are integrated into public-facing web applications to display content to site visitors, making the underlying code reachable via the internet as part of the standard deployment of the website.

SQL Injection

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

A critical vulnerability has been identified in the Verified Reviews plugin, specifically affecting its ability to handle user inputs, potentially allowing unauthorized access to data. This issue arises from a flaw in how the plugin processes reviews before version 2.4.6, which could have implications for systems relying on this software. The main concern at this stage is to determine if this plugin is in use and, if so, to what extent.

Unauthenticated input flaw in review software.
Critical flaw could expose sensitive information.
Confirm usage and assess potential exposure.

Attack Path

How an attacker could exploit the issue

An attacker could exploit this vulnerability by sending a specially crafted request over the network to a site using the Verified Reviews plugin. This could allow them to interact with the vulnerable code, potentially leading to unauthorized access to sensitive database information.

No authentication needed.
Triggered via network requests.
Risk of sensitive data exposure.

Live Threat

Current exploitation, exposure, and threat context

Unauthenticated attackers could potentially access or modify sensitive information stored in the database when the Verified Reviews plugin is in use. This could occur through specially crafted network requests that exploit a weakness in how the plugin handles user input, leading to unintended database operations. The potential impact involves unauthorized data exposure or alteration within the affected system.

Database information exposure.
Via network requests when vulnerable.
Unauthorized data access or alteration.

Operational Fix

Recommended remediation, mitigation, and detection steps

This critical vulnerability in Verified Reviews, an unauthenticated SQL injection, is likely to affect public-facing websites. The first practical step is for the web application owner or platform team to identify all instances of the affected plugin, confirm its accessibility from the internet, and assess its business criticality. Once identified and prioritized, a remediation plan involving the vendor or a security team can be developed.

Application or platform owner should lead.
Verify plugin reachability and criticality.
Coordinate vendor remediation or mitigation.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is the Verified Reviews plugin used for?

Verified Reviews (Avis Vérifiés) is a WordPress plugin designed to collect, manage, and display customer feedback on e-commerce websites. It integrates directly into a site to show ratings and comments to visitors, which helps build trust and social proof. Because it functions as a public-facing component of a web application, it must interact with the site's underlying database to retrieve and render this review content for users.

How does CVE-2026-81800 work?

This vulnerability is classified as a SQL Injection (CWE-89). It occurs when software fails to properly sanitize user-supplied data before including it in a database query. In this case, the plugin does not adequately filter input, allowing an attacker to inject malicious SQL commands. This can trick the database into executing unintended operations, potentially exposing sensitive information or causing the system to behave in ways not intended by the developer.

Do I need to be logged in to trigger this SQL injection?

No, this vulnerability does not require authentication. An attacker can trigger the flaw remotely by sending specially crafted network requests to the target website. The issue is specific to how the plugin processes incoming data, meaning that standard interactions with the plugin's features from an unauthenticated state are sufficient to potentially expose the database to unauthorized queries.

Is my website at risk from this vulnerability?

If you use the Verified Reviews plugin, your risk depends on your site's architecture. According to Halo Surface Signal, because this plugin is designed to display content to public visitors, it is typically integrated into the front-end of websites. This makes the vulnerable code reachable over the internet by default. If your site is accessible to the public, the plugin is likely exposed to potential network-based probes seeking to exploit this flaw.

How should I respond to the Verified Reviews alert?

Start by performing an inventory of your web assets to identify every instance where the Verified Reviews plugin is installed and active. Verify which of these installations are reachable from the internet, as these represent your highest priority. Once identified, document the business role of the plugin and coordinate with your security team or the vendor to plan for a secure update, prioritizing systems where sensitive database information is stored.

References

patchstack.com/database/wordpress/plugin/netreviews/vulnerability/wo…

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.