Title: Plugin Vulnerability Flagged in Patchstack
Last modified: August 26, 2026

---

# Plugin Vulnerability Flagged in Patchstack

 *  Resolved [ccbackus](https://wordpress.org/support/users/ccbackus/)
 * (@ccbackus)
 * [1 week, 5 days ago](https://wordpress.org/support/topic/plugin-vulnerability-flagged-in-patchstack/)
 * I recieved notice today from WP Engine that this plugin has been flagged as vulnerable
   as outlined here:
 * [https://patchstack.com/database/wordpress/plugin/g-business-reviews-rating/vulnerability/wordpress-reviews-and-rating-google-reviews-plugin-5-10-authenticated-contributor-stored-cross-site-scripting-via-multiple-shortcodes-vulnerability](https://patchstack.com/database/wordpress/plugin/g-business-reviews-rating/vulnerability/wordpress-reviews-and-rating-google-reviews-plugin-5-10-authenticated-contributor-stored-cross-site-scripting-via-multiple-shortcodes-vulnerability)
 * Are you able to address this vulnerability?

Viewing 3 replies - 1 through 3 (of 3 total)

 *  Plugin Author [Noah Hearle](https://wordpress.org/support/users/designextreme/)
 * (@designextreme)
 * [1 week, 5 days ago](https://wordpress.org/support/topic/plugin-vulnerability-flagged-in-patchstack/#post-19003878)
 * [@ccbackus](https://wordpress.org/support/users/ccbackus/) Yes, I am aware of
   this issue as reported by Wordfence. I have a fix already in place and it will
   be released shortly in a major update to the plugin: version 6.0.
 *  Plugin Author [Noah Hearle](https://wordpress.org/support/users/designextreme/)
 * (@designextreme)
 * [1 week, 4 days ago](https://wordpress.org/support/topic/plugin-vulnerability-flagged-in-patchstack/#post-19004645)
 * [@ccbackus](https://wordpress.org/support/users/ccbackus/) I’ve release the major
   update: version 6.0 and it’s the biggest change in years. This version has significant
   new features and improvements in its security. It will be released after a WordPress.
   org review in around 6 hours.
 *  Thread Starter [ccbackus](https://wordpress.org/support/users/ccbackus/)
 * (@ccbackus)
 * [1 week, 4 days ago](https://wordpress.org/support/topic/plugin-vulnerability-flagged-in-patchstack/#post-19004675)
 * Sounds great. Thanks for the update.

Viewing 3 replies - 1 through 3 (of 3 total)

You must be [logged in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fplugin-vulnerability-flagged-in-patchstack%2F%3Foutput_format%3Dmd&locale=en_US)
to reply to this topic.

 * ![](https://ps.w.org/g-business-reviews-rating/assets/icon.svg?rev=2722684)
 * [Reviews and Rating - Google Reviews](https://wordpress.org/plugins/g-business-reviews-rating/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/g-business-reviews-rating/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/g-business-reviews-rating/)
 * [Active Topics](https://wordpress.org/support/plugin/g-business-reviews-rating/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/g-business-reviews-rating/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/g-business-reviews-rating/reviews/)

 * 3 replies
 * 2 participants
 * Last reply from: [ccbackus](https://wordpress.org/support/users/ccbackus/)
 * Last activity: [1 week, 4 days ago](https://wordpress.org/support/topic/plugin-vulnerability-flagged-in-patchstack/#post-19004675)
 * Status: resolved