Vulnerabilities / WP Tripadvisor Review Widgets
WP Tripadvisor Review Widgets vulnerabilities
Advisories WPSec published for WP Tripadvisor Review Widgets. Other sources may list more. Its attack surface: WP Tripadvisor Review Widgets on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-30 | WPSEC-2026-2106 | WP Tripadvisor Review Widgets <= 14.2 - Authenticated (Editor+) Stored Cross-Site Scripting via Page Details and Reviews | Medium 4.4 | 14.3 |
| 2026-10-30 | WPSEC-2026-2105 | WP Tripadvisor Review Widgets <= 14.2 - Unauthenticated Authentication Bypass via Review Download Webhook Token | Low 3.7 | 14.3 |
License: CC BY 4.0