Vulnerabilities in widgetpack
5 resultsCVE-2023-6884MEDIUMPlugin for Google Reviews <= 3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcodeEPSS 0.6%CVE-2025-12499HIGHRich Shortcodes for Google Reviews <= 6.8 - Unauthenticated Stored Cross-Site Scripting via Google ReviewEPSS 0.4%CVE-2025-12705HIGHSocial Reviews & Recommendations <= 2.5 - Unauthenticated Stored Cross-Site Scripting via Social Media ReviewsEPSS 0.3%CVE-2026-12154MEDIUMReviews Widgets for Google, Yelp & TripAdvisor <= 2.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_id' Shortcode AttributeEPSS 0.2%CVE-2025-9621MEDIUMWidgetPack Comment System <= 1.6.1 - Cross-Site Request ForgeryEPSS 0.2%