Photo Reviews for WooCommerce vulnerabilities | LiveThreat CVE Feed

Product

Photo Reviews for WooCommerce

by villatheme · last CVE Oct 26, 2026

CVEs

On KEV

8.1

Max CVSS

New 30D

Severity mix

Critical 0High 4Medium 0Low 1

Severity

Exploitation

Watch

Add Photo Reviews for WooCommerce to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-101923	8.1	0%	Oct 3	Photo Reviews for WooCommerce <= 1.2.30 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'wcpr_image_upload_id' Parameter Affected: through 1.2.30
CVE-2026-100517	7.5	0%	Oct 1	WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Insecure Direct Object References (IDOR) vulnerability Affected: through 1.2.30
CVE-2026-100161	7.2	0%	Oct 10	Photo Reviews for WooCommerce <= 1.2.30 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'wcpr_image_upload_id' Parameter Affected: through 1.2.30
CVE-2026-100515	7.1	0%	Oct 5	WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Cross Site Scripting (XSS) vulnerability Affected: through 1.2.30