Trustindex

Products

Product	CVEs	Exploited	Latest
Widgets for Google Reviews	4	–	Jul 11, 2026
Widgets for Social Photo Feed	3	–	May 2, 2026
Customer Reviews Collector for WooCommerce	1	–	Nov 27, 2025
Widgets for Tiktok Feed	1	–	Sep 26, 2025

CVE-2026-11591 Medium 4.4 Widgets for Google Reviews <= 13.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fomo-title' and 'fomo-text' Parameters 0.4%
CVE-2025-14726 Medium 6.5 Widgets for Social Photo Feed <= 1.8 - Missing Authentication to Unauthenticated Plugin Settings Access/Update via trustindex_feed_hook_instagram REST API endpoints 0.8%
CVE-2026-5425 High 7.2 Widgets for Social Photo Feed <= 1.7.9 - Unauthenticated Stored Cross-Site Scripting via feed_data 0.2%
CVE-2025-68595 Medium 5.3 WordPress Widgets for Social Photo Feed plugin <= 1.8 - Broken Access Control vulnerability 0.3%
CVE-2025-9436 Medium 6.4 Widgets for Google Reviews <= 13.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trustindex Shortcode 0.2%
CVE-2025-12510 High 7.2 Widgets for Google Reviews <= 13.2.4 - Unauthenticated Stored Cross-Site Scripting via Google Reviews 0.4%
CVE-2025-12123 Medium 6.1 Customer Reviews Collector for WooCommerce <= 4.6.1 - Reflected Cross-Site Scripting 0.2%
CVE-2025-8906 Medium 6.4 Widgets for Tiktok Feed <= 1.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
CVE-2023-3254 Medium 4.3 Widgets for Google Reviews <= 10.9 - Cross-Site Request Forgery to Plugin Settings Reset 0.2%