Vulnerabilities

TI-2023-06289 CVE-2023-6884 · GHSA-5233-h8c5-6rmx

Plugin for Google Reviews <= 3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

LOW 29

This plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on the 'place_id' att…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00609 Published 2024-02-05 No fix listed CWE-79

TI-2022-21917 CVE-2022-44580 · GHSA-225m-86f4-c6qv

WordPress Plugin for Google Reviews Plugin <= 2.2.3 is vulnerable to SQL Injection

MEDIUM 40

SQL Injection (SQLi) vulnerability in RichPlugins Plugin for Google Reviews plugin <= 2.2.3 versions.

CVSS 3.1CRITICAL 9.1 Network Low privileges No interaction EPSS 0.00634 Published 2023-03-15 No fix listed CWE-89

TI-2022-22335 CVE-2022-45369 · GHSA-mrh2-5fx2-7rv8

WordPress Plugin for Google Reviews plugin <= 2.2.2 - Auth. Broken Access Control vulnerability

LOW 21

Auth. (subscriber+) Broken Access Control vulnerability in Plugin for Google Reviews plugin <= 2.2.2 on WordPress.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0055 Published 2022-11-18 No fix listed CWE-264

Vulnerabilities

Filters

Plugin for Google Reviews <= 3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

WordPress Plugin for Google Reviews Plugin <= 2.2.3 is vulnerable to SQL Injection

WordPress Plugin for Google Reviews plugin <= 2.2.2 - Auth. Broken Access Control vulnerability