Social Testimonials And Reviews Widget Vulnerabilities

[en] Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso social-testimonials-and-reviews-widget.This issue affects Social proof testimonials and reviews by Repuso: from n/a through <= 5.29.

Affected:

up to 5.29

Fix:

No patched version reported

Disclosed:

Oct 22, 2025

CVE-2025-62071 on NVD →

The Reviews Widgets for Google & 45+ platforms by Repuso plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in all versions up to, and including, 5.29. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an...

CVSS:

4.3

Affected:

up to 5.29

Fixed in:

5.30

Disclosed:

Oct 16, 2025

CVE-2025-62071 on NVD →

The Social proof testimonials and reviews by Repuso plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 5.21. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized...

CVSS:

4.3

Affected:

up to 5.21

Fixed in:

5.22

Disclosed:

Apr 1, 2025

CVE-2025-31886 on NVD →

[en] Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Social proof testimonials and reviews by Repuso: from n/a through 5.21.

Affected:

up to 5.22

Fixed in:

5.22

Disclosed:

Apr 1, 2025

CVE-2025-31886 on NVD →

[en] The Social proof testimonials and reviews by Repuso plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rw_image_badge1' shortcode in all versions up to, and including, 5.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possibl...

Affected:

up to 5.21

Fixed in:

5.21

Disclosed:

Jan 15, 2025

CVE-2024-13351 on NVD →

The Social proof testimonials and reviews by Repuso plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rw_image_badge1' shortcode in all versions up to, and including, 5.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVSS:

7.2

Affected:

up to 5.20

Fixed in:

5.21

Disclosed:

Jan 14, 2025

CVE-2024-13351 on NVD →

[en] Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social proof testimonials and reviews by Repuso: from n/a through 4.97.

Affected:

up to 5.00

Fixed in:

5.00

Disclosed:

Jan 2, 2025

CVE-2023-46196 on NVD →

The Social proof testimonials and reviews by Repuso plugin for WordPress is vulnerable to unauthorized access of data due to missing capability checks on several functions hooked via AJAX actions in versions up to, and including, 4.97. This makes it possible for authenticated attackers, with subscriber-level access and...

CVSS:

4.3

Affected:

up to 4.97

Fixed in:

5.00

Disclosed:

Oct 18, 2023

CVE-2023-46196 on NVD →

[en] Cross-Site Request Forgery (CSRF) vulnerability in Repuso Social proof testimonials and reviews by Repuso plugin <= 5.00 versions.

Affected:

up to 5.02

Fixed in:

5.02

Disclosed:

Oct 12, 2023

CVE-2023-45048 on NVD →

The Social proof testimonials and reviews by Repuso plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.01. This is due to missing or incorrect nonce validation on the pagewide_widget function. This makes it possible for unauthenticated attackers to change widget setting...

CVSS:

5.4

Affected:

up to 5.01

Fixed in:

5.02

Disclosed:

Oct 3, 2023

CVE-2023-45048 on NVD →