Skip to content
OpenAdvisories

Vendor

PARETO Digital

2 known vulnerabilities.

Products

Embedder for Google Reviews 2 Send Users Email – Email Subscribers, Email Marketing Newsletter 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-13362

    Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

    Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject …

    bPlugins webfactory unitecms nicheaddons Web / CMS
  • Medium 5.3
    CVE-2025-54730

    WordPress Embedder for Google Reviews Plugin <= 1.7.3 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in PARETO Digital Embedder for Google Reviews embedder-for-google-reviews allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Embedder for Google Reviews: from n/a through <= 1.7.3.

    PARETO Digital Embedder for Google Reviews