PLUGIN SECURITY
Is Wp Reviews Plugin For Google safe?
Embed Google reviews fast and easily into your WordPress site. Increase SEO, trust and sales using Google reviews.
What this plugin does
- Slug:
wp-reviews-plugin-for-google - Author: Trustindex
- 900000+ active installs
- 98/100 rating (2627 reviews on wordpress.org)
- 19267810 all-time downloads
- On WordPress.org since 2019-11-13
googlegoogle businessgoogle places reviewsreviewswidget
Maintenance status
- Latest known version: 13.3.1
- Last updated: 2026-08-18 9:32am GMT
- Tested up to WordPress: 7.1
- Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
6 known CVEs on file for Wp Reviews Plugin For Google.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-11591 | Widgets for Google Reviews [wp-reviews-plugin-for-google] < 13.3.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.4 | < 13.3.1 | 13.3.1 | 2026-07-10 | ✓ fixed in latest |
| CVE-2025-12510 | Widgets for Google Reviews [wp-reviews-plugin-for-google] < 13.2.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.2 | < 13.2.5 | 13.2.5 | 2025-12-05 | ✓ fixed in latest |
| CVE-2023-48275 | Widgets for Google Reviews [wp-reviews-plugin-for-google] < 11.1 | Unrestricted Upload of File with Dangerous Type | High 8.0 | < 11.1 | 11.1 | 2023-11-22 | ✓ fixed in latest |
| CVE-2023-3254 | Widgets for Google Reviews [wp-reviews-plugin-for-google] < 10.9.1 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 10.9.1 | 10.9.1 | 2023-10-16 | ✓ fixed in latest |
| CVE-2022-4470 | Widgets for Google Reviews [wp-reviews-plugin-for-google] < 9.8 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 9.8 | 9.8 | 2023-01-05 | ✓ fixed in latest |
| — | Widgets for Google Reviews [wp-reviews-plugin-for-google] < 13.2.2 | — | Unknown | < 13.2.2 | 13.2.2 | 0000-00-00 | ✓ fixed in latest |
| CVE-2025-9436 | Widgets for Google Reviews < 13.2.2 - Contributor+ Stored XSS via trustindex Shortcode | — | Unknown | < 13.2.2 | 13.2.2 | — | ✓ fixed in latest |
How to fix it
Keep Wp Reviews Plugin For Google updated — 13.3.1 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Site Kit by Google – Analytics, Search Console, AdSense, Speed — 5000000+ active installs — 84/100 (1009)
- Google for WooCommerce — 800000+ active installs — 54/100 (266)
- GA Google Analytics – Connect Google Analytics to WordPress — 400000+ active installs — 98/100 (158) — max PHP 8.4
- OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. — 300000+ active installs — 94/100 (212) — max PHP 8.4
- Nextend Social Login and Register — 200000+ active installs — 98/100 (446) — max PHP <8.0
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.