{
 "id": "WPSEC-2026-2105",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2105/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2105/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2105/index.md",
 "title": "WP Tripadvisor Review Widgets <= 14.2 - Unauthenticated Authentication Bypass via Review Download Webhook Token",
 "description": "The WP Tripadvisor Review Widgets plugin for WordPress is vulnerable to Authentication Bypass via the unauthenticated review download webhook in all versions up to, and including, 14.2. This is due to the webhook comparing the submitted token against the raw 'review-download-inprogress' option, which holds the predictable string 'error' after a failed review download. This makes it possible for unauthenticated attackers to submit 'error' as the token and replace the site's stored reviews and business page details with arbitrary content, provided the plugin is connected and a review download has previously failed.",
 "plugin": {
  "slug": "review-widgets-for-tripadvisor",
  "name": "WP Tripadvisor Review Widgets",
  "full_name": "WP Tripadvisor Review Widgets",
  "wordpress_org": "https://wordpress.org/plugins/review-widgets-for-tripadvisor/",
  "advisories_url": "https://wpsec.com/vuln/plugin/review-widgets-for-tripadvisor/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/review-widgets-for-tripadvisor"
 },
 "type": "AUTHBYPASS",
 "cwe": [
  "CWE-287"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 3.7,
  "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
  "severity": "Low"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "14.3",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 14.3"
  ]
 },
 "introduced_in": null,
 "fixed_in": "14.3",
 "remediation": "Update to 14.3 or later.",
 "fix_released": "2026-10-29T14:30:47+00:00",
 "published": "2026-10-30T14:47:12+00:00",
 "updated": "2026-10-29T17:45:38.173960+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2105/",
  "https://plugins.svn.wordpress.org/review-widgets-for-tripadvisor/tags/14.3/",
  "https://wordpress.org/plugins/review-widgets-for-tripadvisor/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/review-widgets-for-tripadvisor",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "None seen",
  "as_of": "2026-10-30"
 }
}