Vendors / RichPlugins Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now RichPlugins records in CISA KEV No RichPlugins vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 40
SQL Injection (SQLi) vulnerability in RichPlugins Plugin for Google Reviews plugin <= 2.2.3 versions.
CVSS 3.1 CRITICAL 9.1· Network · Low privileges · No interaction · EPSS 0.00634 · Published 2023-03-15 · No fix listed CWE-89
Priority LOW 29
This plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on the 'place_id' att…
CVSS 3.1 MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00609 · Published 2024-02-05 · No fix listed CWE-79
Priority LOW 21
Auth. (subscriber+) Broken Access Control vulnerability in Plugin for Google Reviews plugin <= 2.2.2 on WordPress.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.0055 · Published 2022-11-18 · No fix listed CWE-264
Open these records in search → All records by CVSS severity
1 0 4 0 0
THREATIST.IORead the docs