Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

widgetpack — Vulnerabilities & Security Advisories 7

Browse all 7 CVE security advisories affecting widgetpack. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Widgetpack is a software development kit enabling businesses to create interactive web widgets and embeddable applications. Historically, it has been associated with multiple critical vulnerabilities including remote code execution, cross-site scripting, and privilege escalation flaws. The platform's widespread use in third-party integrations has amplified the impact of these security weaknesses. While no major public incidents have been documented, the presence of four CVEs indicates a pattern of security concerns that organizations should address when implementing Widgetpack solutions. Its architecture allowing widget embedding inherently creates attack surfaces that require careful configuration and ongoing security monitoring.

Found 1 results / 7 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-12154 Reviews Widgets for Google, Yelp & TripAdvisor <= 2.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_id' Shortcode Attribute — Reviews Widgets for Google, TripAdvisor, Yelp & Recommendations CWE-79 6.4 Medium 2026-07-06

This page lists every published CVE security advisory associated with widgetpack. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.