Advisories · Technology

Customer Reviews for WooCommerce.

Every CVE that names Customer Reviews for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-76585 CVE record

CVSS 8.8 High

Customer Reviews for WooCommerce < 5.118.0 - Unauthenticated Stored XSS via 'comment' Parameter
- Customer Reviews for WooCommerce
- Cross-site scripting (XSS)
Not analysed yet 30 Aug 2026
CVE-2026-14941 CVE record

CVSS 5.4 Medium

Customer Reviews for WooCommerce < 5.116.0 - Subscriber+ Missing Authorization via Multiple Settings AJAX Actions
- Customer Reviews for WooCommerce
- Broken access control
Not analysed yet 10 Aug 2026
CVE-2026-12684 CVE record

CVSS 6.5 Medium

Customer Reviews for WooCommerce < 5.113.0 - Unauthenticated Arbitrary Media Upload via cr_upload_media
- Customer Reviews for WooCommerce
- Unrestricted file upload
Not analysed yet 16 Jul 2026
CVE-2023-0079 CVE record

CVSS 5.4 Medium

Customer Reviews for WooCommerce < 5.17.0 - Contributor+ Stored XSS
- Customer Reviews for WooCommerce
Not analysed yet 16 Jan 2024
CVE-2023-0080 CVE record

CVSS 8.8 High

Customer Reviews for WooCommerce < 5.16.0 - Contributor+ LFI
- Customer Reviews for WooCommerce
Not analysed yet 13 Feb 2023