trustindex vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20255
3. 20263

Newest CVEs

• CVE-2026-11591

  Widgets for Google Reviews <= 13.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fomo-title' and 'fomo-text' Parameters

  trustindex · Widgets for Google Reviews

  Medium4.4
• CVE-2025-14726

  Widgets for Social Photo Feed <= 1.8 - Missing Authentication to Unauthenticated Plugin Settings Access/Update via trustindex_feed_hook_instagram REST API endpoints

  trustindex · Widgets for Social Photo Feed

  Medium6.5
• CVE-2026-5425

  Widgets for Social Photo Feed <= 1.7.9 - Unauthenticated Stored Cross-Site Scripting via feed_data

  trustindex · Widgets for Social Photo Feed

  High7.2
• CVE-2025-68595

  WordPress Widgets for Social Photo Feed plugin <= 1.8 - Broken Access Control vulnerability

  Trustindex · Widgets for Social Photo Feed

  Medium5.3
• CVE-2025-9436

  Widgets for Google Reviews <= 13.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trustindex Shortcode

  trustindex · Widgets for Google Reviews

  Medium6.4
• CVE-2025-12510

  Widgets for Google Reviews <= 13.2.4 - Unauthenticated Stored Cross-Site Scripting via Google Reviews

  trustindex · Widgets for Google Reviews

  High7.2
• CVE-2025-12123

  Customer Reviews Collector for WooCommerce <= 4.6.1 - Reflected Cross-Site Scripting

  trustindex · Customer Reviews Collector for WooCommerce

  Medium6.1
• CVE-2025-8906

  Widgets for Tiktok Feed <= 1.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

  trustindex · Widgets for Tiktok Feed

  Medium6.4
• CVE-2023-3254

  Widgets for Google Reviews <= 10.9 - Cross-Site Request Forgery to Plugin Settings Reset

  trustindex · Widgets for Google Reviews

  Medium4.3