Widgetpack vulnerabilities

Products

• Rich Showcase For Google Reviews 5

Newest

• richplugins rich showcase for google reviews Rich Showcase for Google Reviews <= 7.1.6 - Missing Authorization to Authenticated (Contributor+) Site Secret Disclosure via 'grw_auth_code' Site Secret Disclosure via grw-builder Admin Page CVE-2026-110020 6.5 MediumOctober 28, 2026
• richplugins rich showcase for google reviews Rich Showcase for Google Reviews <= 7.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Google Review Text (imported via Places API) CVE-2026-100148 6.4 MediumOctober 3, 2026
• richplugins rich showcase for google reviews Rich Showcase for Google Reviews <= 6.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pagination' Shortcode Attribute CVE-2026-15739 6.4 MediumJuly 24, 2026
• widgetpack reviews widgets for google, tripadvisor, yelp & recommendations Reviews Widgets for Google, Yelp & TripAdvisor <= 2.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_id' Shortcode Attribute CVE-2026-12154 6.4 MediumJuly 6, 2026
• widgetpack reviews widgets for google, yelp & tripadvisor Social Reviews & Recommendations <= 2.5 - Unauthenticated Stored Cross-Site Scripting via Social Media Reviews CVE-2025-12705 7.2 HighDecember 9, 2025
• richplugins rich showcase for google reviews Rich Shortcodes for Google Reviews <= 6.8 - Unauthenticated Stored Cross-Site Scripting via Google Review CVE-2025-12499 7.2 HighDecember 6, 2025
• widgetpack comment system WidgetPack Comment System <= 1.6.1 - Cross-Site Request Forgery CVE-2025-9621 4.3 MediumOctober 11, 2025
• richplugins plugin for google reviews, rich showcase for google reviews +1 more Plugin for Google Reviews <= 3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode CVE-2023-6884 6.4 MediumFebruary 5, 2024
• richplugins plugin for google reviews WordPress Plugin for Google Reviews Plugin <= 2.2.3 is vulnerable to SQL Injection CVE-2022-44580 9.1 CriticalMarch 15, 2023