Rich Showcase for Google Reviews vulnerabilities | LiveThreat CVE Feed

Product

Rich Showcase for Google Reviews

by widgetpack · last CVE Oct 28, 2026

CVEs

On KEV

6.5

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 3Low 0

Severity

Exploitation

Watch

Add Rich Showcase for Google Reviews to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-110020 New	6.5	–	Oct 28	Rich Showcase for Google Reviews <= 7.1.6 - Missing Authorization to Authenticated (Contributor+) Site Secret Disclosure via 'grw_auth_code' Site Secret Disclosure via grw-builder Admin Page Affected: through 7.1.6
CVE-2026-100148	6.4	0%	Oct 3	Rich Showcase for Google Reviews <= 7.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Google Review Text (imported via Places API) Affected: through 7.1.3
CVE-2026-15739	6.4	0%	Jul 24	Rich Showcase for Google Reviews <= 6.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pagination' Shortcode Attribute Affected: through 6.9.9