| CVE-2026-120553 |
Customer Reviews for WooCommerce <= 5.126.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slides_to_show' Shortcode Attribute
|
6.4
Medium
|
Nov 5, 2026 |
| CVE-2026-97663 |
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment…
|
7.2
High
|
Oct 2, 2026 |
| CVE-2026-89055 |
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to,…
|
9.1
Critical
|
Sep 25, 2026 |
| CVE-2026-6176 |
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
|
7.2
High
|
Aug 28, 2026 |
| CVE-2026-13771 |
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'color'…
|
6.4
Medium
|
Jul 9, 2026 |
| CVE-2026-3355 |
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the…
|
6.1
Medium
|
Apr 16, 2026 |
| CVE-2026-4664 |
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authentication bypass in all versions up…
|
5.3
Medium
|
Apr 10, 2026 |
| CVE-2026-1316 |
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
|
7.2
High
|
Feb 12, 2026 |
| CVE-2025-14891 |
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
|
6.4
Medium
|
Jan 7, 2026 |
| CVE-2025-5720 |
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
|
6.4
Medium
|
Jul 31, 2025 |
| CVE-2024-10614 |
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing…
|
4.3
Medium
|
Nov 16, 2024 |
| CVE-2024-3731 |
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's'…
|
6.1
Medium
|
Apr 19, 2024 |
| CVE-2024-3869 |
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a…
|
4.3
Medium
|
Apr 16, 2024 |
| CVE-2024-3243 |
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized email sending due to a missing…
|
4.3
Medium
|
Apr 16, 2024 |
| CVE-2024-1044 |
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a…
|
5.3
Medium
|
Feb 20, 2024 |
| CVE-2023-6979 |
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file…
|
8.8
High
|
Jan 11, 2024 |