widgetpack Rich Showcase for Google Reviews vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Latest widgetpack Rich Showcase for Google Reviews vulnerabilities

CVE-2026-110020 — Rich Showcase for Google Reviews <= 7.1.6 - Missing Authorization to Authenticated (Contributor+) Site Secret Disclosure via 'grw_auth_code' Site Secret Disclosure via grw-builder Admin Page (CVSS 6.5)
CVE-2026-100148 — Rich Showcase for Google Reviews <= 7.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Google Review Text (imported via Places API) (CVSS 6.4)
CVE-2026-15739 — Rich Showcase for Google Reviews <= 6.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pagination' Shortcode Attribute (CVSS 6.4)
CVE-2025-12499 — Rich Shortcodes for Google Reviews <= 6.8 - Unauthenticated Stored Cross-Site Scripting via Google Review (CVSS 7.2)
CVE-2023-6884 — Plugin for Google Reviews <= 3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode (CVSS 5.4)
CVE-2022-44580 — WordPress Plugin for Google Reviews Plugin <= 2.2.3 is vulnerable to SQL Injection (CVSS 8.8)
CVE-2022-45369 — WordPress Plugin for Google Reviews plugin <= 2.2.2 - Auth. Broken Access Control vulnerability (CVSS 4.3)