Plugin icon

Widgets for Google Reviews

wp-reviews-plugin-for-google

Vulnerabilities:

6

Last Updated:

September 24, 2026

Active Installs:

1000000

Published
Title
Fixed in
CVSS
Published
2026-07-10
Title
Widgets for Google Reviews < 13.3.1 - Editor+ Stored Cross-Site Scripting via fomo-title and fomo-text Parameters
Fixed in
Fixed in 13.3.1
CVSS
3.5 (low)
Published
2025-12-10
Title
Widgets for Google Reviews < 13.2.2 - Contributor+ Stored XSS via trustindex Shortcode
Fixed in
Fixed in 13.2.2
CVSS
5.9 (medium)
Published
2025-12-05
Title
Widgets for Google Reviews < 13.2.5 - Unauthenticated Stored XSS via Google Reviews
Fixed in
Fixed in 13.2.5
CVSS
6.5 (medium)
Published
2023-11-22
Title
Multiple Plugins by Trustindex.io <= (Various Versions)- Authenticated (Editor+) Arbitrary File Upload
Fixed in
Fixed in 11.1
CVSS
6.6 (medium)
Published
2023-10-16
Title
Widgets for Google Reviews < 10.9.1 - Arbitrary Settings Update via CSRF
Fixed in
Fixed in 10.9.1
CVSS
4.3 (medium)
Published
2023-01-05
Title
Widgets for Google Reviews < 9.8 - Contributor+ Stored XSS
Fixed in
Fixed in 9.8
CVSS
6.8 (medium)