<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: villatheme-photo-reviews-for-woocommerce</title><description>Every new CVE for villatheme-photo-reviews-for-woocommerce.</description><link>https://agentprime.io/</link><item><title>CVE-2026-111404: WordPress Photo Reviews for WooCommerce plugin &lt;= 1.2.31 - Race Condition vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-111404/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-111404/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Oct 2026 17:28:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-100161: Photo Reviews for WooCommerce &lt;= 1.2.30 - Unauthenticated Stored DOM-Based Cross-Site Scripting via &apos;wcpr_image_upload_id&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-100161/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100161/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 10 Oct 2026 06:40:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-100515: WordPress Photo Reviews for WooCommerce plugin &lt;= 1.2.30 - Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-100515/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100515/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 18:08:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-101923: Photo Reviews for WooCommerce &lt;= 1.2.30 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via &apos;wcpr_image_upload_id&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-101923/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101923/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 03 Oct 2026 05:29:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-100517: WordPress Photo Reviews for WooCommerce plugin &lt;= 1.2.30 - Insecure Direct Object References (IDOR) vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-100517/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100517/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Oct 2026 14:34:05 GMT</pubDate><category>CVE</category></item></channel></rss>