Skip to content
OpenAdvisories

Product · techlabpro1

Widget for Google Reviews

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Widget for Google Reviews <= 1.0.15 - Authenticated (Subscriber+) Directory Traversal to Local File Inclusion

    The Widget for Google Reviews plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.0.15 via the layout parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inclu…