Rich Showcase for Google Reviews
Rich Showcase for Google Reviews has 9 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 9 are fixed as of October 2026. Their average CVSS score is 6.7, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2026 was the busiest year with 4 disclosures.
The most common weakness is Cross-Site Scripting, behind 5 of the records (56%). Other recurring categories include Missing Authorization, Cross-Site Request Forgery (CSRF).
Every one of the 9 issues recorded for Rich Showcase for Google Reviews has a vendor fix available, so running the current release closes all known holes.
7 independent researchers contributed these findings, most of them (2) reported by Wordfence PRISM. Rich Showcase for Google Reviews is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2022-44580Plugin for Google Reviews <= 2.2.3 - Authenticated (Subscriber+) SQL Injection
Read the full analysisVulnerability Records

Rich Showcase for Google Reviews
Author
richplugins
Build instant trust with visitors by showing your real Google reviews and star rating right on your WordPress site. Setup takes less than a minute — no coding, no API key required for the first 10 reviews. There are no limits on how many Google business locations you can connect, and you can create as many widgets or shortcodes as needed to place reviews across your site. The plugin is easy to use and helps build trust with your visitors by displaying real Google reviews and your overall rating. Active on 100,000+ WordPress sites. Want to see how it works? Watch the short demo below to see how quickly you can get started – or simply try it in the Live Preview. Google reviews slider, grid, list and rating Responsive layouts: Slider, Grid, List and Rating Rating layout can open the reviews in a popup on click Floating Google rating badge with review count and a live line from your reviews, shown on every page of the site or only where you add it Pagination for List and Grid layouts Trim long reviews with a “read more” link UI options to customize star, text, rating and review colors Additional styling with your own CSS Works with dark themes Upload a custom business photo Embed Google reviews with Elementor, Gutenberg, WPBakery or a shortcode Display reviews using shortcode, widget, block, or page builders (Elementor, WPBakery, Divi, Beaver Builder, SiteOrigin) No limits on created widgets or shortcodes Optimized for performance: one CSS and one JS file, about 24 KB compressed in total, lazy-loaded images Google reviews, updates and privacy Show up to 10 Google reviews on initial setup – NO API KEY REQUIRED Connect multiple Google business places Places page: every connected place with its rating and last update; update reviews, create a widget or delete the place from there Badges: pick a preset, set position, tone and size, then publish the badge on the whole site in one click Automatically updates reviews and ratings when using your own API key Fully ADA compliant: built for Accessibility Fully GDPR-compliant: no external requests, all data loads from your own website Choose which reviews to display or hide, option to hide reviews without text “review us on Google” button to collect new reviews Supports multiple languages ⭐ Live demo Support If you have any questions or need help using the plugin, we recommend the following steps: Check the plugin’s support page in your WordPress admin under “Google Reviews / Support”. Visit the Support Forum to browse existing topics or ask a new question. Email support in English is also available on weekdays: support@richplugins.com Roadmap Under discussion.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C