Trustindex vulnerabilities

Products

• Widgets For Google Reviews 6
• Widgets For Social Photo Feed 3
• Widgets For Google Reviews 2

Newest

• trustindex widgets for google reviews Widgets for Google Reviews <= 13.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fomo-title' and 'fomo-text' Parameters CVE-2026-11591 4.4 MediumJuly 11, 2026
• trustindex widgets for social photo feed Widgets for Social Photo Feed <= 1.8 - Missing Authentication to Unauthenticated Plugin Settings Access/Update via trustindex_feed_hook_instagram REST API endpoints CVE-2025-14726 6.5 MediumMay 2, 2026
• trustindex widgets for social photo feed Widgets for Social Photo Feed <= 1.7.9 - Unauthenticated Stored Cross-Site Scripting via feed_data CVE-2026-5425 7.2 HighApril 4, 2026
• trustindex widgets for social photo feed WordPress Widgets for Social Photo Feed plugin <= 1.8 - Broken Access Control vulnerability CVE-2025-68595 5.3 MediumDecember 24, 2025
• trustindex widgets for google reviews Widgets for Google Reviews <= 13.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trustindex Shortcode CVE-2025-9436 6.4 MediumDecember 11, 2025
• trustindex widgets for google reviews Widgets for Google Reviews <= 13.2.4 - Unauthenticated Stored Cross-Site Scripting via Google Reviews CVE-2025-12510 7.2 HighDecember 6, 2025
• trustindex customer reviews collector for woocommerce Customer Reviews Collector for WooCommerce <= 4.6.1 - Reflected Cross-Site Scripting CVE-2025-12123 6.1 MediumNovember 27, 2025
• trustindex widgets for tiktok feed Widgets for Tiktok Feed <= 1.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-8906 6.4 MediumSeptember 26, 2025
• trustindex widgets for google reviews WordPress Widgets for Google Reviews plugin <= 11.0.2 - Arbitrary File Upload vulnerability CVE-2023-48275 8.0 HighMarch 26, 2024
• trustedindex widgets for google reviews Widgets for Google Reviews <= 10.9 - Cross-Site Request Forgery to Plugin Settings Reset CVE-2023-3254 4.3 MediumOctober 18, 2023
• trustindex wp testimonials WordPress WP Testimonials Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-2830 5.4 MediumOctober 3, 2023
• trustindex widgets for google reviews Widgets for Google Reviews < 9.8 - Contributor+ Stored XSS CVE-2022-4470 5.4 MediumJanuary 30, 2023