Sign in

4.3 Medium

CVE-2022-38134 Authenticated (subscriber+) Broken Access Control vulnerability in Customer Reviews for WooCommerce…

Description

Authenticated (subscriber+) Broken Access Control vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress.

Affected products and versions

Product	Affected versions	Fixed in
Customer Reviews for WooCommerce (WordPress plugin) 5.3	earliest → 5.3.5	No fix stated

The 3 CVEs of Customer Reviews for WooCommerce (WordPress plugin) →

CVE-2022-38470 Cross-Site Request Forgery (CSRF) vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress 4.3 Medium CVE-2022-40194 Unauthenticated Sensitive Information Disclosure vulnerability in Customer Reviews for WooCommerce… 5.3 Medium

Do you use Customer Reviews for WooCommerce (WordPress plugin)?

Track this CVE Watch Customer Reviews for WooCommerce (WordPress plugin) Check my SBOMs

www.cveye.io/en/cve/CVE-2022-38134

Timeline

Published September 23, 2022
Last modified April 28, 2026

References

wordpress.org wordpress.org
patchstack.com patchstack.com

Track this CVE