bompus
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP Customer Reviews | 4 | – | Sep 19, 2026 |
Exploited and recent CVEs
- CVE-2026-11608 WP Customer Reviews <= 3.7.8 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter 0.5%
- CVE-2025-14452 WP Customer Reviews <= 3.7.5 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter 0.3%
- CVE-2023-4686 WP Customer Reviews <= 3.6.6 - Authenticated (Subscriber+) Sensitive Information Exposure 0.6%
- CVE-2023-4648 WP Customer Reviews <= 3.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.4%