Widgetpack
4 CVEs across 4 Widgetpack products. Browse Widgetpack vulnerabilities, severities, and proof-of-concept exploits.
Widgetpack products with known CVEs
Widgetpack CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-15739 | Medium | 6.4 | 2026-07-24 | The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'pagination' Shortcode Attribute in all versions up… |
CVE-2026-12154 | Medium | 6.4 | 2026-07-06 | The Reviews Widgets for Google, Yelp & TripAdvisor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page_id' shortcode attribute of t… |
CVE-2025-12705 | High | 7.2 | 2025-12-09 | The Social Reviews & Recommendations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in the 'trim_text' function in al… |
CVE-2025-12499 | High | 7.2 | 2025-12-06 | The Rich Shortcodes for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the contents of a Google Review in all versions up… |
CVE-2025-9621 | Medium | 4.3 | 2025-10-11 | The WidgetPack Comment System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.1. This is due to miss… |
CVE-2023-6884 | Medium | 6.4 | 2024-02-05 | This plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 3.1 due to insufficient… |