Widgetpack

6 CVEs across 4 Widgetpack products. Browse Widgetpack vulnerabilities, severities, and proof-of-concept exploits.

Widgetpack products with known CVEs

ProductCVEs
Rich Showcase For Google Reviews3
Reviews Widgets For Google, Tripadvisor, Yelp & Recommendations1
Reviews Widgets For Google, Yelp & Tripadvisor1
Widgetpack Comment System1
Widgetpack CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-15739Medium6.42026-07-24The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'pagination' Shortcode Attribute in all versions up…
CVE-2026-12154Medium6.42026-07-06The Reviews Widgets for Google, Yelp & TripAdvisor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page_id' shortcode attribute of t…
CVE-2025-12705High7.22025-12-09The Social Reviews & Recommendations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in the 'trim_text' function in al…
CVE-2025-12499High7.22025-12-06The Rich Shortcodes for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the contents of a Google Review in all versions up…
CVE-2025-9621Medium4.32025-10-11The WidgetPack Comment System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.1. This is due to miss…
CVE-2023-6884Medium6.42024-02-05This plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 3.1 due to insufficient…