widgetpack vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20253
3. 20264

Newest CVEs

• CVE-2026-110020

  Rich Showcase for Google Reviews <= 7.1.6 - Missing Authorization to Authenticated (Contributor+) Site Secret Disclosure via 'grw_auth_code' Site Secret Disclosure via grw-builder Admin Page

  widgetpack · Rich Showcase for Google Reviews

  Medium6.5
• CVE-2026-100148

  Rich Showcase for Google Reviews <= 7.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Google Review Text (imported via Places API)

  widgetpack · Rich Showcase for Google Reviews

  Medium6.4
• CVE-2026-15739

  Rich Showcase for Google Reviews <= 6.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pagination' Shortcode Attribute

  widgetpack · Rich Showcase for Google Reviews

  Medium6.4
• CVE-2026-12154

  Reviews Widgets for Google, Yelp & TripAdvisor <= 2.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_id' Shortcode Attribute

  widgetpack · Reviews Widgets for Google, TripAdvisor, Yelp & Recommendations

  Medium6.4
• CVE-2025-12705

  Social Reviews & Recommendations <= 2.5 - Unauthenticated Stored Cross-Site Scripting via Social Media Reviews

  widgetpack · Reviews Widgets for Google, Yelp & TripAdvisor

  High7.2
• CVE-2025-12499

  Rich Shortcodes for Google Reviews <= 6.8 - Unauthenticated Stored Cross-Site Scripting via Google Review

  widgetpack · Rich Showcase for Google Reviews

  High7.2
• CVE-2025-9621

  WidgetPack Comment System <= 1.6.1 - Cross-Site Request Forgery

  widgetpack · WidgetPack Comment System

  Medium4.3
• CVE-2023-6884

  Plugin for Google Reviews <= 3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

  widgetpack · Rich Showcase for Google Reviews

  Medium6.4