Advisories · Technology

bompus WP Customer Reviews.

Every CVE that names bompus WP Customer Reviews among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-11608 CVE record

CVSS 6.1 Medium

WP Customer Reviews <= 3.7.8 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter
- bompus WP Customer Reviews
- Cross-site scripting (XSS)
Not analysed yet 19 Sept 2026
CVE-2025-14452 CVE record

CVSS 7.2 High

WP Customer Reviews <= 3.7.5 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter
- bompus WP Customer Reviews
- Cross-site scripting (XSS)
Not analysed yet 19 Feb 2026
CVE-2023-4686 CVE record

CVSS 4.3 Medium

WP Customer Reviews <= 3.6.6 - Authenticated (Subscriber+) Sensitive Information Exposure
- bompus WP Customer Reviews
- Broken access control
Not analysed yet 22 Nov 2023
CVE-2023-4648 CVE record

CVSS 4.4 Medium

WP Customer Reviews <= 3.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
- bompus WP Customer Reviews
- Cross-site scripting (XSS)
Not analysed yet 20 Oct 2023