Skip to contentIvole Customer Reviews For Woocommerce vulnerabilities
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.127.0 - Unauthenticated Sensitive Information Exposure in 'search' ParameterCVE-2026-1215185.3 Medium
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.126.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slides_to_show' Shortcode AttributeCVE-2026-1205536.4 Medium
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.122.0 - Unauthenticated Stored Cross-Site Scripting via Comment Author NameCVE-2026-976637.2 High
- cusrev customer reviews for woocommerceWordPress Customer Reviews for WooCommerce plugin <= 5.120.0 - Arbitrary Content Deletion vulnerabilityCVE-2026-968237.5 High
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.120.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'items[][media]' ParameterCVE-2026-89055Public exploit9.1 Critical
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce < 5.118.0 - Unauthenticated Stored XSS via 'comment' ParameterCVE-2026-765858.8 High
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.106.0 - Unauthenticated Stored Cross-Site Scripting via Aggregated Review FormCVE-2026-61767.2 High
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce < 5.116.0 - Subscriber+ Missing Authorization via Multiple Settings AJAX ActionsCVE-2026-149415.4 Medium
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce < 5.113.0 - Unauthenticated Arbitrary Media Upload via cr_upload_mediaCVE-2026-12684Public exploit6.5 Medium
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.113.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode AttributeCVE-2026-137716.4 Medium
- cusrev customer reviews for woocommerceWordPress Customer Reviews for WooCommerce plugin <= 5.110.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-560437.1 High
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.101.0 - Reflected Cross-Site Scripting via 'crsearch'CVE-2026-33556.1 Medium
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.103.0 - Unauthenticated Authentication Bypass to Arbitrary Review Submission via 'key' ParameterCVE-2026-46645.3 Medium
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.97.0 - Unauthenticated Stored Cross-Site Scripting via media[].href ParameterCVE-2026-13167.2 High
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.93.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via displayName ParameterCVE-2025-148916.4 Medium
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.80.2 - Unauthenticated Stored Cross-Site Scripting via `author` ParameterCVE-2025-57206.4 Medium
- cusrev customer reviews for woocommerceWordPress Customer Reviews for WooCommerce plugin <= 5.36.0 - Broken Access Control vulnerabilityCVE-2023-451014.3 Medium
- cusrev customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.61.0 - Missing Authorization to Authenticated (Subscriber+) Import CancellationCVE-2024-106144.3 Medium
- cusrev customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.47.0 - Reflected Cross-Site Scripting via 's'CVE-2024-37316.1 Medium
- cusrev customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Coupon SearchCVE-2024-38694.3 Medium
- cusrev customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email SendingCVE-2024-32434.3 Medium
- cusrev customer reviews for woocommerceWordPress Customer Reviews for WooCommerce Plugin <= 5.38.1 is vulnerable to Broken Access ControlCVE-2023-516924.3 Medium
- cusrev customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.38.10 - Improper Authorization via submit_reviewCVE-2024-10445.3 Medium
- cusrev customer reviews for woocommerceCustomer Reviews for WooCommerce < 5.17.0 - Contributor+ Stored XSSCVE-2023-00795.4 Medium
- cusrev customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.38.9 - Authenticated (Author+) Arbitrary File UploadCVE-2023-69798.8 High
- cusrev customer reviews for woocommerceCustomer Reviews for WooCommerce < 5.16.0 - Contributor+ LFICVE-2023-00808.8 High