Skip to content
OpenAdvisories

Vendor

trustindex

9 known vulnerabilities.

Products

Widgets for Google Reviews 4 Widgets for Social Photo Feed 3 Widgets for Tiktok Feed 1 Customer Reviews Collector for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-5425

    Widgets for Social Photo Feed <= 1.7.9 - Unauthenticated Stored Cross-Site Scripting via feed_data

    The Widgets for Social Photo Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'feed_data' parameter keys in all versions up to, and including, 1.7.9 due to insufficient input sanitization and output escaping. This makes it possib…

    trustindex Widgets for Social Photo Feed Web / CMS
  • High 7.2
    CVE-2025-12510

    Widgets for Google Reviews <= 13.2.4 - Unauthenticated Stored Cross-Site Scripting via Google Reviews

    The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 13.2.4 due to insufficient input sanitization and output escaping on Google Reviews data imported by the plugin. This makes …

    trustindex Widgets for Google Reviews Web / CMS