bompus

Products

ProductCVEsExploitedLatest
WP Customer Reviews4–Sep 19, 2026

Exploited and recent CVEs

  • CVE-2026-11608 Medium 6.1 WP Customer Reviews <= 3.7.8 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter 0.5%
  • CVE-2025-14452 High 7.2 WP Customer Reviews <= 3.7.5 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter 0.3%
  • CVE-2023-4686 Medium 4.3 WP Customer Reviews <= 3.6.6 - Authenticated (Subscriber+) Sensitive Information Exposure 0.6%
  • CVE-2023-4648 Medium 4.4 WP Customer Reviews <= 3.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.4%