3 matches found
CVE-2022-45369
CVE-2022-45369 is a Broken Access Control vulnerability in the WordPress plugin “Plugin for Google Reviews” (versions
CVE-2022-44580
The CVE-2022-44580 entry concerns a SQL Injection in the RichPlugins Plugin for Google Reviews plugin, affecting versions
CVE-2023-6884
CVE-2023-6884 affects the WordPress Plugin for Google Reviews (widget-google-reviews) up to version 3.1. Root cause: insufficient input sanitization and output escaping on the place_id attribute used by the shortcode, enabling Stored Cross-Site Scripting. Impact: authenticated users with contribu...