RichPlugins records
3 published records for vendor richplugins.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 33.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2022-44580No exploit | WordPress Plugin for Google Reviews Plugin <= 2.2.3 is vulnerable to SQL Injectionrichplugins · plugin for google reviews · CWE-89 | High8.8 | — | 0.6% | Mar 15, 2023 |
21Monitor | CVE-2023-6884No exploit | Plugin for Google Reviews <= 3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcoderichplugins · plugin for google reviews · CWE-79 | Medium5.4 | — | 0.6% | Feb 5, 2024 |
17Monitor | CVE-2022-45369No exploit | WordPress Plugin for Google Reviews plugin <= 2.2.2 - Auth. Broken Access Control vulnerabilityrichplugins · plugin for google reviews · CWE-264 | Medium4.3 | — | 0.5% | Nov 18, 2022 |
- CVE-2022-4458035Monitor
WordPress Plugin for Google Reviews Plugin <= 2.2.3 is vulnerable to SQL Injection
HighCVSS 8.8No exploitEPSS 1%richplugins · plugin for google reviewsMar 15, 2023
- CVE-2023-688421Monitor
Plugin for Google Reviews <= 3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
MediumCVSS 5.4No exploitEPSS 1%richplugins · plugin for google reviewsFeb 5, 2024
- CVE-2022-4536917Monitor
WordPress Plugin for Google Reviews plugin <= 2.2.2 - Auth. Broken Access Control vulnerability
MediumCVSS 4.3No exploitEPSS 1%richplugins · plugin for google reviewsNov 18, 2022