Rich Showcase for Google Reviews

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Rich Showcase for Google Reviews

Information

Software Type Plugin
Software Slug widget-google-reviews (view on wordpress.org)
Software Status Active
Software Author widgetpack
Software Website wordpress.org
Software Downloads 7,448,603
Software Active Installs 100,000
Software Record Last Updated August 8, 2026

7 Vulnerabilities

Submit a Vulnerability
Rich Showcase for Google Reviews <= 6.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pagination' Shortcode Attribute
6.4
CVE-2026-15739
Jul 23, 2026
Researcher: Wordfence PRISM
Rich Showcase for Google Reviews <= 6.9.4.3 - Authenticated (Editor+) Stored Cross-Site Scripting
4.4
CVE-2026-32360
Feb 15, 2026
Researcher: Nguyen Ba Khanh
Rich Shortcodes for Google Reviews <= 6.8 - Unauthenticated Stored Cross-Site Scripting via Google Review
7.2
CVE-2025-12499
Dec 5, 2025
Researcher: Kishan Vyas
Plugin for Google Reviews <= 3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
6.4
CVE-2023-6884
Jan 12, 2024
Researcher: Akbar Kustirama
Plugin for Google Reviews <= 2.2.3 - Authenticated (Subscriber+) SQL Injection
8.8
CVE-2022-44580
Feb 8, 2023
Researcher: Rafie Muhammad
Plugin for Google Reviews <= 2.2.2 - Cross-Site Request Forgery
8.8
CVE ID Unknown
Nov 16, 2022
Researchers:
Plugin for Google Reviews <= 2.2.2 - Missing Authorization
5.4
CVE-2022-45369
Nov 16, 2022
Researcher: Nguyen Anh Tien
Title Status CVE ID CVSS Researchers Date
Rich Showcase for Google Reviews <= 6.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pagination' Shortcode Attribute Patched CVE-2026-15739 6.4 Wordfence PRISM July 23, 2026
Rich Showcase for Google Reviews <= 6.9.4.3 - Authenticated (Editor+) Stored Cross-Site Scripting Patched CVE-2026-32360 4.4 Nguyen Ba Khanh February 15, 2026
Rich Shortcodes for Google Reviews <= 6.8 - Unauthenticated Stored Cross-Site Scripting via Google Review Patched CVE-2025-12499 7.2 Kishan Vyas December 5, 2025
Plugin for Google Reviews <= 3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode Patched CVE-2023-6884 6.4 Akbar Kustirama January 12, 2024
Plugin for Google Reviews <= 2.2.3 - Authenticated (Subscriber+) SQL Injection Patched CVE-2022-44580 8.8 Rafie Muhammad February 8, 2023
Plugin for Google Reviews <= 2.2.2 - Cross-Site Request Forgery Patched 8.8 November 16, 2022
Plugin for Google Reviews <= 2.2.2 - Missing Authorization Patched CVE-2022-45369 5.4 Nguyen Anh Tien November 16, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation