agentprime: ivole-customer-reviews-for-woocommerceEvery new CVE for ivole-customer-reviews-for-woocommerce.https://agentprime.io/CVE-2026-120553: Customer Reviews for WooCommerce <= 5.126.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slides_to_show' Shortcode Attributehttps://agentprime.io/advisories/CVE-2026-120553/https://agentprime.io/advisories/CVE-2026-120553/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 04:48:05 GMTCVECVE-2026-97663: Customer Reviews for WooCommerce <= 5.122.0 - Unauthenticated Stored Cross-Site Scripting via Comment Author Namehttps://agentprime.io/advisories/CVE-2026-97663/https://agentprime.io/advisories/CVE-2026-97663/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 07:39:20 GMTCVECVE-2026-89055: Customer Reviews for WooCommerce <= 5.120.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'items[][media]' Parameterhttps://agentprime.io/advisories/CVE-2026-89055/https://agentprime.io/advisories/CVE-2026-89055/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 06:39:54 GMTCVEcriticalCVE-2026-6176: Customer Reviews for WooCommerce <= 5.106.0 - Unauthenticated Stored Cross-Site Scripting via Aggregated Review Formhttps://agentprime.io/advisories/CVE-2026-6176/https://agentprime.io/advisories/CVE-2026-6176/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 11:29:29 GMTCVECVE-2026-13771: Customer Reviews for WooCommerce <= 5.113.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attributehttps://agentprime.io/advisories/CVE-2026-13771/https://agentprime.io/advisories/CVE-2026-13771/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jul 2026 06:52:51 GMTCVECVE-2026-3355: Customer Reviews for WooCommerce <= 5.101.0 - Reflected Cross-Site Scripting via 'crsearch'https://agentprime.io/advisories/CVE-2026-3355/https://agentprime.io/advisories/CVE-2026-3355/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Apr 2026 06:44:53 GMTCVECVE-2026-4664: Customer Reviews for WooCommerce <= 5.103.0 - Unauthenticated Authentication Bypass to Arbitrary Review Submission via 'key' Parameterhttps://agentprime.io/advisories/CVE-2026-4664/https://agentprime.io/advisories/CVE-2026-4664/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Apr 2026 01:24:57 GMTCVECVE-2026-1316: Customer Reviews for WooCommerce <= 5.97.0 - Unauthenticated Stored Cross-Site Scripting via media[].href Parameterhttps://agentprime.io/advisories/CVE-2026-1316/https://agentprime.io/advisories/CVE-2026-1316/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Feb 2026 12:31:50 GMTCVECVE-2025-14891: Customer Reviews for WooCommerce <= 5.93.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via displayName Parameterhttps://agentprime.io/advisories/CVE-2025-14891/https://agentprime.io/advisories/CVE-2025-14891/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Jan 2026 03:21:03 GMTCVECVE-2025-5720: Customer Reviews for WooCommerce <= 5.80.2 - Unauthenticated Stored Cross-Site Scripting via `author` Parameterhttps://agentprime.io/advisories/CVE-2025-5720/https://agentprime.io/advisories/CVE-2025-5720/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 31 Jul 2025 04:26:20 GMTCVECVE-2024-10614: Customer Reviews for WooCommerce <= 5.61.0 - Missing Authorization to Authenticated (Subscriber+) Import Cancellationhttps://agentprime.io/advisories/CVE-2024-10614/https://agentprime.io/advisories/CVE-2024-10614/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 16 Nov 2024 05:39:34 GMTCVECVE-2024-3731: Customer Reviews for WooCommerce <= 5.47.0 - Reflected Cross-Site Scripting via 's'https://agentprime.io/advisories/CVE-2024-3731/https://agentprime.io/advisories/CVE-2024-3731/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 02:34:43 GMTCVECVE-2024-3243: Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sendinghttps://agentprime.io/advisories/CVE-2024-3243/https://agentprime.io/advisories/CVE-2024-3243/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Apr 2024 12:51:46 GMTCVECVE-2024-3869: Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Coupon Searchhttps://agentprime.io/advisories/CVE-2024-3869/https://agentprime.io/advisories/CVE-2024-3869/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Apr 2024 12:51:46 GMTCVECVE-2024-1044: Customer Reviews for WooCommerce <= 5.38.10 - Improper Authorization via submit_reviewhttps://agentprime.io/advisories/CVE-2024-1044/https://agentprime.io/advisories/CVE-2024-1044/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Feb 2024 18:56:28 GMTCVECVE-2023-6979: Customer Reviews for WooCommerce <= 5.38.9 - Authenticated (Author+) Arbitrary File Uploadhttps://agentprime.io/advisories/CVE-2023-6979/https://agentprime.io/advisories/CVE-2023-6979/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Jan 2024 08:32:34 GMTCVE