CVE-2026-8441: WP Review Slider Pro SQL injection (REPRO-2026-00239)

Pruva

Verified reproduction

CVE-2026-8441: WP Review Slider Pro SQL injection

CVE-2026-8441 is verified against the affected target vulnerability class: SQLi This high reproduction includes runnable sandbox proof, artifacts, and a plain-text agent view under REPRO-2026-00239.

REPRO-2026-00239 SQLi Variant found Jul 6, 2026 .txt

Severity HIGH

Confidence HIGH

Reproduced in 42m 0s

Tool calls 309

Spend $15.94

01 · Reproduce

Download script Open in Codespaces → Variant script

$ pruva-verify REPRO-2026-00239

or

curl -O https://pruva.dev/api/v1/reproductions/REPRO-2026-00239/artifacts/bundle/repro/reproduction_steps.sh && chmod +x reproduction_steps.sh && ./reproduction_steps.sh

Run in a VM or disposable container. This exploits a real vulnerability.

02 · The vulnerability

The WP Review Slider Pro plugin for WordPress is vulnerable to SQL injection via the 'noti' parameter. Reproduce: install the WP Review Slider Pro plugin, send a request with a SQL injection payload in the affected parameter, and observe database error or extract data.

03 · Root cause

Variant analysis

04 · Reproduction transcript

The agent's step-by-step process — every tool call, every handoff, the moment the exploit fired. Phases: support triages the advisory · repro reproduces it · vuln_variant confirms the fix blocks it · judge verifies.

Loading session...

05 · Artifacts

Scripts, logs, diffs, and output captured during the reproduction.

bundle/vuln_variant/root_cause_equivalence.json1.2 KB

bundle/logs/evidence.log1.2 KB

bundle/repro/runtime_manifest.json1.3 KB

bundle/repro/reproduction_steps.sh24.1 KB

bundle/repro/rca_report.md8.4 KB

bundle/repro/validation_verdict.json0.8 KB

bundle/logs/reproduction_steps.log7.2 KB

bundle/logs/plugin_source_identity.log2.4 KB

bundle/logs/real_notinstring_patch.diff1.0 KB