Rich Showcase for Google Reviews

Rich Showcase for Google Reviews has 9 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 9 are fixed as of October 2026. Their average CVSS score is 6.7, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2026 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Scripting, behind 5 of the records (56%). Other recurring categories include Missing Authorization, Cross-Site Request Forgery (CSRF).

Every one of the 9 issues recorded for Rich Showcase for Google Reviews has a vendor fix available, so running the current release closes all known holes.

7 independent researchers contributed these findings, most of them (2) reported by Wordfence PRISM. Rich Showcase for Google Reviews is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
6.7/ 10
Patch Coverage100%
Open

0

Fixed

9

Get automatic notifications for all Rich Showcase for Google Reviews vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2022-44580

Plugin for Google Reviews <= 2.2.3 - Authenticated (Subscriber+) SQL Injection

Read the full analysis

Vulnerability Records

9 records
2026-10-27 17:50CVE-2026-110020
6.5
Medium
Wordfence PRISMYes
2026-10-02 17:16CVE-2026-100148
6.4
Medium
Jakub HermanYes
2026-07-23 19:00CVE-2026-15739
6.4
Medium
Wordfence PRISMYes
2026-02-15 00:00CVE-2026-32360
4.4
Medium
Nguyen Ba KhanhYes
2025-12-05 18:52CVE-2025-12499
7.2
High
hashiramasenju333Yes
2024-01-12 00:00CVE-2023-6884
6.4
Medium
Akbar KustiramaYes
2023-02-08 00:00CVE-2022-44580
8.8
High
Rafie MuhammadYes
2022-11-16 00:00N/A
8.8
High
AnonymousYes
2022-11-16 00:00CVE-2022-45369
5.4
Medium
Nguyen Anh TienYes
Showing 1–9 of 9 reports
Rich Showcase for Google Reviews banner
Latestv7.2

Rich Showcase for Google Reviews

richplugins

Author

richplugins

4.9(1,622)
98/100
Last Updated
2026-10-20 (8d ago)
Active Installs
100,000+
Downloads
8,117,405
Requires WP
6.0+
Requires PHP
7.2+
Tested up to
WP 7.1.3
Created
2016-10-08 (10y ago)

Build instant trust with visitors by showing your real Google reviews and star rating right on your WordPress site. Setup takes less than a minute — no coding, no API key required for the first 10 reviews. There are no limits on how many Google business locations you can connect, and you can create as many widgets or shortcodes as needed to place reviews across your site. The plugin is easy to use and helps build trust with your visitors by displaying real Google reviews and your overall rating. Active on 100,000+ WordPress sites. Want to see how it works? Watch the short demo below to see how quickly you can get started – or simply try it in the Live Preview. Google reviews slider, grid, list and rating Responsive layouts: Slider, Grid, List and Rating Rating layout can open the reviews in a popup on click Floating Google rating badge with review count and a live line from your reviews, shown on every page of the site or only where you add it Pagination for List and Grid layouts Trim long reviews with a “read more” link UI options to customize star, text, rating and review colors Additional styling with your own CSS Works with dark themes Upload a custom business photo Embed Google reviews with Elementor, Gutenberg, WPBakery or a shortcode Display reviews using shortcode, widget, block, or page builders (Elementor, WPBakery, Divi, Beaver Builder, SiteOrigin) No limits on created widgets or shortcodes Optimized for performance: one CSS and one JS file, about 24 KB compressed in total, lazy-loaded images Google reviews, updates and privacy Show up to 10 Google reviews on initial setup – NO API KEY REQUIRED Connect multiple Google business places Places page: every connected place with its rating and last update; update reviews, create a widget or delete the place from there Badges: pick a preset, set position, tone and size, then publish the badge on the whole site in one click Automatically updates reviews and ratings when using your own API key Fully ADA compliant: built for Accessibility Fully GDPR-compliant: no external requests, all data loads from your own website Choose which reviews to display or hide, option to hide reviews without text “review us on Google” button to collect new reviews Supports multiple languages ⭐ Live demo Support If you have any questions or need help using the plugin, we recommend the following steps: Check the plugin’s support page in your WordPress admin under “Google Reviews / Support”. Visit the Support Forum to browse existing topics or ask a new question. Email support in English is also available on weekdays: support@richplugins.com Roadmap Under discussion.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C