CVE-2026-11591Medium 4.4Widgets for Google Reviews <= 13.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fomo-title' and 'fomo-text' Parameters0.4%
CVE-2025-9436Medium 6.4Widgets for Google Reviews <= 13.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trustindex Shortcode0.2%
CVE-2025-12510High 7.2Widgets for Google Reviews <= 13.2.4 - Unauthenticated Stored Cross-Site Scripting via Google Reviews0.4%
CVE-2023-3254Medium 4.3Widgets for Google Reviews <= 10.9 - Cross-Site Request Forgery to Plugin Settings Reset0.2%