Skip to content
OpenAdvisories

Vendor

widgetpack

8 known vulnerabilities.

Products

Rich Showcase for Google Reviews 5 WidgetPack Comment System 1 Reviews Widgets for Google, Yelp & TripAdvisor 1 Reviews Widgets for Google, TripAdvisor, Yelp & Recommendations 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2025-12705

    Social Reviews & Recommendations <= 2.5 - Unauthenticated Stored Cross-Site Scripting via Social Media Reviews

    The Social Reviews & Recommendations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in the 'trim_text' function in all versions up to, and including, 2.5 due to insufficient input sanitization and output escaping. Thi…

    widgetpack Reviews Widgets for Google, Yelp & TripAdvisor Web / CMS
  • High 7.2
    CVE-2025-12499

    Rich Shortcodes for Google Reviews <= 6.8 - Unauthenticated Stored Cross-Site Scripting via Google Review

    The Rich Shortcodes for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the contents of a Google Review in all versions up to, and including, 6.8 due to insufficient input sanitization and output escaping. This makes it po…

    widgetpack Rich Showcase for Google Reviews Web / CMS