WI
Vendor
widgetpack
4
CVEs
0
On KEV
2
New 30D
Products
RS6.5
Rich Showcase for Google Reviews
widgetpack
3 CVEs0 on KEV2 new
RW6.4
Reviews Widgets for Google, TripAdvisor, Yelp & Recommendations
widgetpack
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110020 New | RS Rich Showcase for Google Reviews widgetpack | 6.5 | Oct 28 | Rich Showcase for Google Reviews <= 7.1.6 - Missing Authorization to Authenticated (Contributor+) Site Secret Disclosure via 'grw_auth_code' Site Secret Disclosure via grw-builder Admin Page |
| CVE-2026-100148 | RS Rich Showcase for Google Reviews widgetpack | 6.4 | Oct 3 | Rich Showcase for Google Reviews <= 7.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Google Review Text (imported via Places API) |
| CVE-2026-15739 | RS Rich Showcase for Google Reviews widgetpack | 6.4 | Jul 24 | Rich Showcase for Google Reviews <= 6.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pagination' Shortcode Attribute |
| CVE-2026-12154 | RW Reviews Widgets for Google, TripAdvisor, Yelp & Recommendations widgetpack | 6.4 | Jul 6 | Reviews Widgets for Google, Yelp & TripAdvisor <= 2.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_id' Shortcode Attribute |