MAL-2025-34331 Malicious code in sync-sampled-reviews-with-raw-reviews (npm)

The package sync-sampled-reviews-with-raw-reviews was found to contain malicious code...

CVE-2025-54730

CVE-2025-54730 : Missing Authorization in the WordPress plugin “Embedder for Google Reviews” allows access to functionality not properly constrained by ACLs. Affected versions are up to and including 1.7.3. Public sources (Patchstack, CVE listings) identify this as a broken access control vulnera...

CVE-2025-54730 WordPress Embedder for Google Reviews Plugin <= 1.7.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in PARETO Digital Embedder for Google Reviews embedder-for-google-reviews allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Embedder for Google Reviews: from n/a through = 1.7.3...

CVE-2025-54730 WordPress Embedder for Google Reviews Plugin <= 1.7.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in PARETO Digital Embedder for Google Reviews embedder-for-google-reviews allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Embedder for Google Reviews: from n/a through = 1.7.3...

WordPress Embedder for Google Reviews Plugin <= 1.7.3 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Bao BlueRock in WordPress Plugin Embedder for Google Reviews versions = 1.7.3...

WordPress plugin Embedder for Google Reviews 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-33388 · Unknown · Pareto Digital Embedder For Google Reviews

Name of the Vulnerable Software and Affected Versions: PARETO Digital Embedder for Google Reviews versions n/a through 1.7.3 Description: A missing authorization flaw exists in PARETO Digital Embedder for Google Reviews. This issue allows access to functionality that is not properly constrained b...

WordPress Customer Reviews for WooCommerce plugin cross-site scripting vulnerability

WordPress Customer Reviews for WooCommerce plugin is mainly used to enhance the customer reviews feature of the WooCommerce platform to boost store conversions and user trust through automated alerts, multi-language support and social proof. A cross-site scripting vulnerability exists in the...

WordPress plugin Customer Reviews for WooCommerce 跨站脚本漏洞

WordPress Customer Reviews for WooCommerce plugin is mainly used to enhance the customer reviews feature of the WooCommerce platform to boost store conversions and user trust through automated alerts, multi-language support and social proof. A cross-site scripting vulnerability exists in the...

PT-2025-31473 · WordPress · Customer Reviews For Woocommerce

Name of the Vulnerable Software and Affected Versions: Customer Reviews for WooCommerce plugin for WordPress versions prior to 5.80.3 Description: The Customer Reviews for WooCommerce plugin for WordPress is susceptible to Stored Cross-Site Scripting through the author parameter. Insufficient inp...

CVE-2025-54295

A Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla was discovered...

CVE-2025-54295

A Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla was discovered...

CVE-2025-54295 Extension - dj-extensions.com - Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla

A Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla was discovered...

CVE-2025-54295 Extension - dj-extensions.com - Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla

A Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla was discovered...

CVE-2025-54295

CVE-2025-54295 concerns a Reflected XSS in the DJ-Reviews Joomla extension (versions 1.0–1.3.6). The vulnerability arises from a reflected cross-site scripting issue in that component, as reported across multiple sources (NVD/Red Hat/CVE list, PT Security). Affected product: DJ-Reviews (DJ-Extens...

DJ-Extensions DJ-Reviews 跨站脚本漏洞

DJ-Extensions DJ-Reviews is a rating and review extension from DJ-Extensions. A cross-site scripting vulnerability exists in DJ-Extensions DJ-Reviews versions 1.0-1.3.6, which stems from a reflected cross-site scripting vulnerability...

PT-2025-30568 · Joomla · Dj-Reviews

Name of the Vulnerable Software and Affected Versions: DJ-Reviews versions 1.0 through 1.3.6 Description: A Reflected Cross-Site Scripting XSS issue exists in the DJ-Reviews component for Joomla. This allows an attacker to inject malicious scripts into a web page viewed by other users...

WordPress Widget for Google Reviews <= 1.0.15 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by LVT-tholv2k in WordPress Plugin Widget for Google Reviews versions = 1.0.15...

CVE-2025-5845

The Affiliate Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘numColumns’ parameter in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

CVE-2025-5845

The CVE-2025-5845 entry concerns the WordPress Affiliate Reviews plugin. A stored cross-site scripting (XSS) flaw exists in the numColumns parameter for all versions up to 1.0.6 due to insufficient input sanitization and output escaping. Exploitation requires authenticated access at Contributor l...