Widgetpack - vulnerabilities (CVEs)
8 CVEs in 6 products, 2 in the last 30 days, newest from 2026-10-28.
Products
- Rich Showcase For Google Reviews - 5 CVEs
- Reviews Widgets For Google - 2 CVEs
- Tripadvisor - 1 CVEs
- Widgetpack Comment System - 1 CVEs
- Yelp Recommendations - 1 CVEs
- Yelp Tripadvisor - 1 CVEs
Newest CVEs of Widgetpack
- CVE-2026-110020 - CVSS 6.5 (medium), 2026-10-28: The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.1.6 This is due to the…
- CVE-2026-100148 - CVSS 6.4 (medium), 2026-10-03: The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'reviews[].text' parameter in all versions up…
- CVE-2026-15739 - CVSS 6.4 (medium), 2026-07-24: The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'pagination' Shortcode Attribute in all versions up…
- CVE-2026-12154 - CVSS 6.4 (medium), 2026-07-06: The Reviews Widgets for Google, Yelp & TripAdvisor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page_id' shortcode attribute of…
- CVE-2025-12705 - CVSS 7.2 (high), 2025-12-09: The Social Reviews & Recommendations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in the 'trim_text' function in…
- CVE-2025-12499 - CVSS 7.2 (high), 2025-12-06: The Rich Shortcodes for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the contents of a Google Review in all versions…
- CVE-2025-9621 - CVSS 4.3 (medium), 2025-10-11: The WidgetPack Comment System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.1. This is due to…
- CVE-2023-6884 - CVSS 6.4 (medium), 2024-02-05: This plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 3.1 due to…
