Known vulnerabilities in Rich Showcase for Google Reviews

Show real Google reviews on your WordPress site in under a minute. Free, GDPR-compliant, with unlimited widgets and locations.

8Reported vulnerabilities

8.8Highest CVSS score

6.9.11Latest version

100,000+Active installs

What to do now

Update Rich Showcase for Google Reviews to 7.1.4 or later. 8 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 15, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2023-6884	Medium 5.4	0.6%	3.1 and earlier	`3.2`	February 5, 2024
CVE-2022-44580	High 8.8	0.6%	2.2.3 and earlier	`2.2.4`	February 8, 2023
WF-e5ca3c84-9d3d-4bbe-90f7-44c9d77a6690	High 8.8	—	2.2.2 and earlier	`2.2.3`	November 16, 2022
CVE-2025-12499	High 7.2	0.4%	0 to 6.8 (inclusive)	`6.8.1`	December 6, 2025
CVE-2026-100148	Medium 6.4	0.3%	0 to 7.1.3 (inclusive)	`7.1.4`	October 3, 2026
CVE-2026-15739	Medium 6.4	0.4%	0 to 6.9.9 (inclusive)	`6.9.10`	July 24, 2026
CVE-2026-32360	Medium 4.4	0.3%	6.9.4.3 and earlier	`6.9.4.4`	February 15, 2026
CVE-2022-45369	Medium 4.3	0.5%	Before 2.2.3	`2.2.3`	November 18, 2022

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.