VillaTheme Photo Reviews for WooCommerce

• CVE-2026-111404 Low 3.7 WordPress Photo Reviews for WooCommerce plugin <= 1.2.31 - Race Condition vulnerability 0.2%
• CVE-2026-100161 High 7.2 Photo Reviews for WooCommerce <= 1.2.30 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'wcpr_image_upload_id' Parameter 0.3%
• CVE-2026-100515 High 7.1 WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-101923 High 8.1 Photo Reviews for WooCommerce <= 1.2.30 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'wcpr_image_upload_id' Parameter 0.3%
• CVE-2026-100517 High 7.5 WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Insecure Direct Object References (IDOR) vulnerability 0.3%