Login Request a demo
CR
Product
Customer Reviews for WooCommerce
by CusRev · last CVE Sep 30, 2026
15
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 0High 7Medium 8Low 0
Severity
All severities15Critical0High7Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Customer Reviews for WooCommerce to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-6979
8.8
1%
Jan 11
Customer Reviews for WooCommerce <= 5.38.9 - Authenticated (Author+) Arbitrary File Upload
Affected: through 5.38.9
CVE-2023-0080
8.8
1%
Feb 13
The Customer Reviews for WooCommerce WordPress plugin before 5.16.0 does not validate one of its shortcode attribute, which could allow users with a contributor role and above to…
Affected: before 5.16.0
CVE-2022-38470
8.8
0%
Sep 23
Cross-Site Request Forgery (CSRF) vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress
Affected: through 5.3.5
CVE-2022-38134
8.8
1%
Sep 23
Authenticated (subscriber+) Broken Access Control vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress
Affected: through 5.3.5
CVE-2026-96823
7.5
0%
Sep 30
WordPress Customer Reviews for WooCommerce plugin <= 5.120.0 - Arbitrary Content Deletion vulnerability
Affected: through 5.120.0
CVE-2022-40194
7.5
1%
Sep 23
Unauthenticated Sensitive Information Disclosure vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress
Affected: through 5.3.5
CVE-2026-56043
7.1
0%
Jun 26
WordPress Customer Reviews for WooCommerce plugin <= 5.110.1 - Cross Site Scripting (XSS) vulnerability
Affected: through 5.110.1
Showing 7