Approved changes feed: RSS · Atom

cpe:2.3:a:richplugins:plugin_for_google_reviews:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorRichplugins (78640a5d-4e0f-5f80-8182-6f88ca1254fb)
ProductPlugin For Google Reviews (fa9097be-014f-5e71-94d7-759c31e3c075)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6884 vulnerable 2026-06-08 06:21:56.142754 Plugin for Google Reviews <= 3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
MEDIUM (6.4)
This plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on the 'place_id' attribute. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2024-02-05T21:21:56.066Z
Updated: 2026-04-08T17:13:55.206Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45369 vulnerable 2026-06-08 05:50:36.127612 WordPress Plugin for Google Reviews plugin <= 2.2.2 - Auth. Broken Access Control vulnerability
MEDIUM (4.3)
Auth. (subscriber+) Broken Access Control vulnerability in Plugin for Google Reviews plugin <= 2.2.2 on WordPress.
Published: 2022-11-18T21:51:16.739Z
Updated: 2026-04-28T16:07:52.695Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44580 vulnerable 2026-06-08 05:49:35.667075 WordPress Plugin for Google Reviews Plugin <= 2.2.3 is vulnerable to SQL Injection
CRITICAL (9.1)
SQL Injection (SQLi) vulnerability in RichPlugins Plugin for Google Reviews plugin <= 2.2.3 versions.
Published: 2023-03-15T14:37:16.009Z
Updated: 2026-04-28T16:07:50.885Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.