CU
Vendor
CusRev
15
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-96823 | CR Customer Reviews for WooCommerce CusRev | 7.5 | Sep 30 | WordPress Customer Reviews for WooCommerce plugin <= 5.120.0 - Arbitrary Content Deletion vulnerability |
| CVE-2026-56043 | CR Customer Reviews for WooCommerce CusRev | 7.1 | Jun 26 | WordPress Customer Reviews for WooCommerce plugin <= 5.110.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2023-45101 | CR Customer Reviews for WooCommerce CusRev | 4.3 | Jan 2 | WordPress Customer Reviews for WooCommerce plugin <= 5.36.0 - Broken Access Control vulnerability |
| CVE-2024-10614 | CR Customer Reviews For Woocommerce Cusrev | 4.3 | Nov 16 | Customer Reviews for WooCommerce <= 5.61.0 - Missing Authorization to Authenticated (Subscriber+) Import Cancellation |
| CVE-2024-3731 | CR Customer Reviews For Woocommerce Cusrev | 6.1 | Apr 19 | Customer Reviews for WooCommerce <= 5.47.0 - Reflected Cross-Site Scripting via 's' |
| CVE-2024-3243 | CR Customer Reviews For Woocommerce Cusrev | 4.3 | Apr 16 | Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending |
| CVE-2024-3869 | CR Customer Reviews For Woocommerce Cusrev | 4.3 | Apr 16 | Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Coupon Search |
| CVE-2023-51692 | CR Customer Reviews for WooCommerce CusRev | 4.3 | Feb 28 | WordPress Customer Reviews for WooCommerce Plugin <= 5.38.1 is vulnerable to Broken Access Control |
| CVE-2024-1044 | CR Customer Reviews For Woocommerce Cusrev | 5.3 | Feb 20 | Customer Reviews for WooCommerce <= 5.38.10 - Improper Authorization via submit_review |
| CVE-2023-0079 | CR Customer Reviews For Woocommerce Cusrev | 5.4 | Jan 16 | The Customer Reviews for WooCommerce WordPress plugin before 5.17.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where… |
| CVE-2023-6979 | CR Customer Reviews For Woocommerce Cusrev | 8.8 | Jan 11 | The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ivole_import_upload_csv AJAX action in… |
| CVE-2023-0080 | CR Customer Reviews For Woocommerce Cusrev | 8.8 | Feb 13 | The Customer Reviews for WooCommerce WordPress plugin before 5.16.0 does not validate one of its shortcode attribute, which could allow users with a contributor role and above to… |
| CVE-2022-40194 | CR Customer Reviews For Woocommerce Cusrev | 7.5 | Sep 23 | Unauthenticated Sensitive Information Disclosure vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress |
| CVE-2022-38470 | CR Customer Reviews For Woocommerce Cusrev | 8.8 | Sep 23 | Cross-Site Request Forgery (CSRF) vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress |
| CVE-2022-38134 | CR Customer Reviews For Woocommerce Cusrev | 8.8 | Sep 23 | Authenticated (subscriber+) Broken Access Control vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress |