Plugin For Google Reviews

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-6884 Feb 05, 22:15 MEDIUM POC PATCH This Month

This plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

WordPress XSS Plugin For Google Reviews Wordpress Plugin Richplugins

NVD VulDB

CVSS 3.1

6.4

EPSS

0.2%

CVE-2022-45369 Nov 18, 23:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Privilege Escalation Google Plugin For Google Reviews Richplugins

NVD

CVSS 3.1

4.3

EPSS

0.5%

CVE-2023-6884

EPSS 0% CVSS 6.4

MEDIUM POC PATCH This Month

WordPress XSS Plugin For Google Reviews +2

NVD VulDB

CVE-2022-45369

EPSS 0% CVSS 4.3

MEDIUM This Month

Auth. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Privilege Escalation Google +2

NVD