Advisories · Technology

CusRev Customer Reviews for WooCommerce (WordPress plugin).

Every CVE that names CusRev Customer Reviews for WooCommerce (WordPress plugin) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-38134 CVE record

CVSS 4.3 Medium

WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Authenticated Broken Access Control vulnerability
- CusRev Customer Reviews for WooCommerce (WordPress plugin)
- CWE-264
Not analysed yet 23 Sept 2022
CVE-2022-38470 CVE record

CVSS 4.3 Medium

WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Cross-Site Request Forgery (CSRF) vulnerability
- CusRev Customer Reviews for WooCommerce (WordPress plugin)
- Cross-site request forgery (CSRF)
Not analysed yet 23 Sept 2022
CVE-2022-40194 CVE record

CVSS 5.3 Medium

WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Sensitive Information Disclosure vulnerability
- CusRev Customer Reviews for WooCommerce (WordPress plugin)
- Information disclosure
Not analysed yet 23 Sept 2022