VendorsCusRevcustomer_reviews_for_woocommerceany version
Vulnerabilities

CusRev Customer Reviews for WooCommerce any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

13CVEs
CVE-2023-6979
Customer Reviews for WooCommerce <= 5.38.9 - Authenticated (Author+) Arbitrary File Upload
Published 2024-01-11 · Modified
8.8EPSS 0.011
CVE-2023-0080
Customer Reviews for WooCommerce < 5.16.0 - Contributor+ LFI
Published 2023-02-13 · Modified
8.8EPSS 0.011
CVE-2022-38134
WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Authenticated Broken Access Control vulnerability
Published 2022-09-23 · Modified
8.8EPSS 0.010
CVE-2022-38470
WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Cross-Site Request Forgery (CSRF) vulnerability
Published 2022-09-23 · Modified
8.8EPSS 0.004
CVE-2022-40194
WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Sensitive Information Disclosure vulnerability
Published 2022-09-23 · Modified
7.5EPSS 0.009
CVE-2024-3731
Customer Reviews for WooCommerce <= 5.47.0 - Reflected Cross-Site Scripting via 's'
Published 2024-04-19 · Modified
6.1EPSS 0.004
CVE-2023-0079
Customer Reviews for WooCommerce < 5.17.0 - Contributor+ Stored XSS
Published 2024-01-16 · Modified
5.4EPSS 0.005
CVE-2024-1044
Customer Reviews for WooCommerce <= 5.38.10 - Improper Authorization via submit_review
Published 2024-02-20 · Modified
5.3EPSS 0.004
CVE-2024-3869
Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Coupon Search
Published 2024-04-16 · Modified
4.3EPSS 0.005
CVE-2024-3243
Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
Published 2024-04-16 · Modified
4.3EPSS 0.004
CVE-2023-51692
WordPress Customer Reviews for WooCommerce Plugin <= 5.38.1 is vulnerable to Broken Access Control
Published 2024-02-28 · Modified
4.3EPSS 0.003
CVE-2023-45101
WordPress Customer Reviews for WooCommerce plugin <= 5.36.0 - Broken Access Control vulnerability
Published 2025-01-02 · Modified
4.3EPSS 0.003
CVE-2024-10614
Customer Reviews for WooCommerce <= 5.61.0 - Missing Authorization to Authenticated (Subscriber+) Import Cancellation
Published 2024-11-16 · Analyzed
4.3EPSS 0.003