Trustindex

trustindex

2 CVEs • 2 products

Products (2)

Click to collapse

Toggle

Widgets For Google Reviews

widgets_for_google_reviews

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-2830 1Trustindex 1Wp Testimonials Jun 17, 2026 Oct 3, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Cross-Site Request Forgery (CSRF) vulnerability in Trustindex.Io WP Testimonials plugin <= 1.4.2 versions.
CVE-2022-4470 1Trustindex 1Widgets For Google Reviews Jun 17, 2026 Jan 30, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 The Widgets for Google Reviews WordPress plugin before 9.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor...Show more The Widgets for Google Reviews WordPress plugin before 9.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2023-2830

1Trustindex

1Wp Testimonials

Jun 17, 2026

Oct 3, 2023

N/A· v4

8.8 HIGH· v3

N/A· v2

Cross-Site Request Forgery (CSRF) vulnerability in Trustindex.Io WP Testimonials plugin <= 1.4.2 versions.

CVE-2022-4470

1Trustindex

1Widgets For Google Reviews

Jun 17, 2026

Jan 30, 2023

N/A· v4

5.4 MEDIUM· v3

N/A· v2

The Widgets for Google Reviews WordPress plugin before 9.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.Show less