ivole Customer Reviews for WooCommerce

• CVE-2026-120553 Medium 6.4 Customer Reviews for WooCommerce <= 5.126.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slides_to_show' Shortcode Attribute 0.3%
• CVE-2026-97663 High 7.2 Customer Reviews for WooCommerce <= 5.122.0 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name 0.2%
• CVE-2026-89055 Critical 9.1 Customer Reviews for WooCommerce <= 5.120.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'items[][media]' Parameter 0.6%
• CVE-2026-6176 High 7.2 Customer Reviews for WooCommerce <= 5.106.0 - Unauthenticated Stored Cross-Site Scripting via Aggregated Review Form 0.4%
• CVE-2026-13771 Medium 6.4 Customer Reviews for WooCommerce <= 5.113.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute 0.4%
• CVE-2026-3355 Medium 6.1 Customer Reviews for WooCommerce <= 5.101.0 - Reflected Cross-Site Scripting via 'crsearch' 0.3%
• CVE-2026-4664 Medium 5.3 Customer Reviews for WooCommerce <= 5.103.0 - Unauthenticated Authentication Bypass to Arbitrary Review Submission via 'key' Parameter 0.7%
• CVE-2026-1316 High 7.2 Customer Reviews for WooCommerce <= 5.97.0 - Unauthenticated Stored Cross-Site Scripting via media[].href Parameter 0.3%
• CVE-2025-14891 Medium 6.4 Customer Reviews for WooCommerce <= 5.93.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via displayName Parameter 0.3%
• CVE-2025-5720 Medium 6.4 Customer Reviews for WooCommerce <= 5.80.2 - Unauthenticated Stored Cross-Site Scripting via `author` Parameter 0.3%
• CVE-2024-10614 Medium 4.3 Customer Reviews for WooCommerce <= 5.61.0 - Missing Authorization to Authenticated (Subscriber+) Import Cancellation 0.3%
• CVE-2024-3731 Medium 6.1 Customer Reviews for WooCommerce <= 5.47.0 - Reflected Cross-Site Scripting via 's' 0.4%
• CVE-2024-3243 Medium 4.3 Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending 0.4%
• CVE-2024-3869 Medium 4.3 Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Coupon Search 0.5%
• CVE-2024-1044 Medium 5.3 Customer Reviews for WooCommerce <= 5.38.10 - Improper Authorization via submit_review 0.4%
• CVE-2023-6979 High 8.8 Customer Reviews for WooCommerce <= 5.38.9 - Authenticated (Author+) Arbitrary File Upload 1.1%