Security
فارسی
All products

widget-google-reviews

WordPress · Plugin
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Rich Showcase for Google Reviews <= 7.1.6 - Missing Authorization to Authenticated (Contributor+) Site Secret Disclosure via 'grw_auth_code' Site Secret Disclosure via grw-builder Admin PageCVE-2026-110020 widget-google-reviews WordPress Medium Fix reported
Rich Showcase for Google Reviews <= 7.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Google Review Text (imported via Places API)CVE-2026-100148 widget-google-reviews WordPress Medium Fix reported
Rich Showcase for Google Reviews <= 6.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pagination' Shortcode AttributeCVE-2026-15739 widget-google-reviews WordPress Medium Fix reported
Rich Showcase for Google Reviews <= 6.9.4.3 - Authenticated (Editor+) Stored Cross-Site ScriptingCVE-2026-32360 widget-google-reviews WordPress Medium Fix reported
Rich Shortcodes for Google Reviews <= 6.8 - Unauthenticated Stored Cross-Site Scripting via Google ReviewCVE-2025-12499 widget-google-reviews WordPress High Fix reported
Plugin for Google Reviews <= 3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcodeCVE-2023-6884 widget-google-reviews WordPress Medium Fix reported
Plugin for Google Reviews <= 2.2.2 - Missing AuthorizationCVE-2022-45369 widget-google-reviews WordPress Medium Fix reported
Plugin for Google Reviews <= 2.2.2 - Cross-Site Request Forgery widget-google-reviews WordPress High Fix reported
Plugin for Google Reviews <= 2.2.3 - Authenticated (Subscriber+) SQL InjectionCVE-2022-44580 widget-google-reviews WordPress High Fix reported