IV
Vendor
ivole
15
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-97663 | CR Customer Reviews for WooCommerce ivole | 7.2 | Oct 2 | Customer Reviews for WooCommerce <= 5.122.0 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name |
| CVE-2026-89055 | CR Customer Reviews for WooCommerce ivole | 9.1 | Sep 25 | Customer Reviews for WooCommerce <= 5.120.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'items[][media]' Parameter |
| CVE-2026-6176 | CR Customer Reviews for WooCommerce ivole | 7.2 | Aug 28 | Customer Reviews for WooCommerce <= 5.106.0 - Unauthenticated Stored Cross-Site Scripting via Aggregated Review Form |
| CVE-2026-13771 | CR Customer Reviews for WooCommerce ivole | 6.4 | Jul 9 | Customer Reviews for WooCommerce <= 5.113.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute |
| CVE-2026-3355 | CR Customer Reviews for WooCommerce ivole | 6.1 | Apr 16 | Customer Reviews for WooCommerce <= 5.101.0 - Reflected Cross-Site Scripting via 'crsearch' |
| CVE-2026-4664 | CR Customer Reviews for WooCommerce ivole | 5.3 | Apr 10 | Customer Reviews for WooCommerce <= 5.103.0 - Unauthenticated Authentication Bypass to Arbitrary Review Submission via 'key' Parameter |
| CVE-2026-1316 | CR Customer Reviews for WooCommerce ivole | 7.2 | Feb 12 | Customer Reviews for WooCommerce <= 5.97.0 - Unauthenticated Stored Cross-Site Scripting via media[].href Parameter |
| CVE-2025-14891 | CR Customer Reviews for WooCommerce ivole | 6.4 | Jan 7 | Customer Reviews for WooCommerce <= 5.93.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via displayName Parameter |
| CVE-2025-5720 | CR Customer Reviews for WooCommerce ivole | 6.4 | Jul 31 | Customer Reviews for WooCommerce <= 5.80.2 - Unauthenticated Stored Cross-Site Scripting via `author` Parameter |
| CVE-2024-10614 | CR Customer Reviews for WooCommerce ivole | 4.3 | Nov 16 | Customer Reviews for WooCommerce <= 5.61.0 - Missing Authorization to Authenticated (Subscriber+) Import Cancellation |
| CVE-2024-3731 | CR Customer Reviews for WooCommerce ivole | 6.1 | Apr 19 | Customer Reviews for WooCommerce <= 5.47.0 - Reflected Cross-Site Scripting via 's' |
| CVE-2024-3243 | CR Customer Reviews for WooCommerce ivole | 4.3 | Apr 16 | Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending |
| CVE-2024-3869 | CR Customer Reviews for WooCommerce ivole | 4.3 | Apr 16 | Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Coupon Search |
| CVE-2024-1044 | CR Customer Reviews for WooCommerce ivole | 5.3 | Feb 20 | Customer Reviews for WooCommerce <= 5.38.10 - Improper Authorization via submit_review |
| CVE-2023-6979 | CR Customer Reviews for WooCommerce ivole | 8.8 | Jan 11 | Customer Reviews for WooCommerce <= 5.38.9 - Authenticated (Author+) Arbitrary File Upload |