Trustindex

11 CVEs across 6 Trustindex products. Browse Trustindex vulnerabilities, severities, and proof-of-concept exploits.

Trustindex products with known CVEs

ProductCVEs
Widgets For Google Reviews4
Widgets For Social Photo Feed3
Customer Reviews Collector For Woocommerce1
Widgets For Google Reviews1
Widgets For Tiktok Feed1
Wp Testimonials1
Trustindex CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-11591Medium4.42026-07-11The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 13.3…
CVE-2025-14726Medium6.52026-05-02The Widgets for Social Photo Feed plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check…
CVE-2026-5425High7.22026-04-04The Widgets for Social Photo Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'feed_data' parameter keys in all versions up to, a…
CVE-2025-68595Medium5.32025-12-24Missing Authorization vulnerability in Trustindex Widgets for Social Photo Feed social-photo-feed-widget allows Exploiting Incorrectly Configured Access Contro…
CVE-2025-9436Medium6.42025-12-11The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `trustindex` shortcode in all versions up to…
CVE-2025-12510High7.22025-12-06The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 13.2.4 due to insufficie…
CVE-2025-12123Medium6.12025-11-27The Customer Reviews Collector for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'email-text' parameter in all versi…
CVE-2025-8906Medium6.42025-09-26The Widgets for Tiktok Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'trustindex-feed' shortcode in all versions up t…
CVE-2023-3254Medium4.32023-10-18The Widgets for Google Reviews plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 10.9. This is due to missing…
CVE-2023-2830Medium5.42023-10-03Cross-Site Request Forgery (CSRF) vulnerability in Trustindex.Io WP Testimonials plugin <= 1.4.2 versions.
CVE-2022-4470Medium5.42023-01-30The Widgets for Google Reviews WordPress plugin before 9.8 does not validate and escape some of its shortcode attributes before outputting them back in the pag…