Ivole vulnerabilities

Products

• Customer Reviews For Woocommerce 25

Newest

• ivole customer reviews for woocommerce Customer Reviews for WooCommerce <= 5.126.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slides_to_show' Shortcode Attribute CVE-2026-120553 6.4 MediumNovember 5, 2026
• ivole customer reviews for woocommerce Customer Reviews for WooCommerce <= 5.122.0 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name CVE-2026-97663 7.2 HighOctober 2, 2026
• cusrev customer reviews for woocommerce WordPress Customer Reviews for WooCommerce plugin <= 5.120.0 - Arbitrary Content Deletion vulnerability CVE-2026-96823 7.5 HighSeptember 30, 2026
• ivole customer reviews for woocommerce Customer Reviews for WooCommerce <= 5.120.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'items[][media]' Parameter CVE-2026-89055 Public exploit 9.1 CriticalSeptember 25, 2026
• ivole customer reviews for woocommerce Customer Reviews for WooCommerce < 5.118.0 - Unauthenticated Stored XSS via 'comment' Parameter CVE-2026-76585 8.8 HighAugust 30, 2026
• ivole customer reviews for woocommerce Customer Reviews for WooCommerce <= 5.106.0 - Unauthenticated Stored Cross-Site Scripting via Aggregated Review Form CVE-2026-6176 7.2 HighAugust 28, 2026
• ivole customer reviews for woocommerce Customer Reviews for WooCommerce < 5.116.0 - Subscriber+ Missing Authorization via Multiple Settings AJAX Actions CVE-2026-14941 5.4 MediumAugust 10, 2026
• ivole customer reviews for woocommerce Customer Reviews for WooCommerce < 5.113.0 - Unauthenticated Arbitrary Media Upload via cr_upload_media CVE-2026-12684 Public exploit 6.5 MediumJuly 16, 2026
• ivole customer reviews for woocommerce Customer Reviews for WooCommerce <= 5.113.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute CVE-2026-13771 6.4 MediumJuly 9, 2026
• cusrev customer reviews for woocommerce WordPress Customer Reviews for WooCommerce plugin <= 5.110.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-56043 7.1 HighJune 26, 2026
• ivole customer reviews for woocommerce Customer Reviews for WooCommerce <= 5.101.0 - Reflected Cross-Site Scripting via 'crsearch' CVE-2026-3355 6.1 MediumApril 16, 2026
• ivole customer reviews for woocommerce Customer Reviews for WooCommerce <= 5.103.0 - Unauthenticated Authentication Bypass to Arbitrary Review Submission via 'key' Parameter CVE-2026-4664 5.3 MediumApril 10, 2026
• ivole customer reviews for woocommerce Customer Reviews for WooCommerce <= 5.97.0 - Unauthenticated Stored Cross-Site Scripting via media[].href Parameter CVE-2026-1316 7.2 HighFebruary 12, 2026
• ivole customer reviews for woocommerce Customer Reviews for WooCommerce <= 5.93.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via displayName Parameter CVE-2025-14891 6.4 MediumJanuary 7, 2026
• ivole customer reviews for woocommerce Customer Reviews for WooCommerce <= 5.80.2 - Unauthenticated Stored Cross-Site Scripting via `author` Parameter CVE-2025-5720 6.4 MediumJuly 31, 2025
• cusrev customer reviews for woocommerce WordPress Customer Reviews for WooCommerce plugin <= 5.36.0 - Broken Access Control vulnerability CVE-2023-45101 4.3 MediumJanuary 2, 2025
• cusrev customer reviews for woocommerce Customer Reviews for WooCommerce <= 5.61.0 - Missing Authorization to Authenticated (Subscriber+) Import Cancellation CVE-2024-10614 4.3 MediumNovember 16, 2024
• cusrev customer reviews for woocommerce Customer Reviews for WooCommerce <= 5.47.0 - Reflected Cross-Site Scripting via 's' CVE-2024-3731 6.1 MediumApril 19, 2024
• cusrev customer reviews for woocommerce Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Coupon Search CVE-2024-3869 4.3 MediumApril 16, 2024
• cusrev customer reviews for woocommerce Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending CVE-2024-3243 4.3 MediumApril 16, 2024
• cusrev customer reviews for woocommerce WordPress Customer Reviews for WooCommerce Plugin <= 5.38.1 is vulnerable to Broken Access Control CVE-2023-51692 4.3 MediumFebruary 28, 2024
• cusrev customer reviews for woocommerce Customer Reviews for WooCommerce <= 5.38.10 - Improper Authorization via submit_review CVE-2024-1044 5.3 MediumFebruary 20, 2024
• cusrev customer reviews for woocommerce Customer Reviews for WooCommerce < 5.17.0 - Contributor+ Stored XSS CVE-2023-0079 5.4 MediumJanuary 16, 2024
• cusrev customer reviews for woocommerce Customer Reviews for WooCommerce <= 5.38.9 - Authenticated (Author+) Arbitrary File Upload CVE-2023-6979 8.8 HighJanuary 11, 2024
• cusrev customer reviews for woocommerce Customer Reviews for WooCommerce < 5.16.0 - Contributor+ LFI CVE-2023-0080 8.8 HighFebruary 13, 2023