CVE-2026-100148 | Widgetpack Rich Showcase for Google Reviews Plugin up to 7.1.3 on WordPress reviews[].text cross site scripting

October 3, 2026 Yanac

A vulnerability classified as problematic has been found in Widgetpack Rich Showcase for Google Reviews Plugin up to 7.1.3 on WordPress. This impacts an unknown function. The manipulation of the argument reviews[].text leads to cross site scripting.

This vulnerability is traded as CVE-2026-100148. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More