Customer Reviews for WooCommerce
CusRev
Developer
5.102.0
Latest version
80,000
Installations
No date
Last updated
Vulnerability history
0 present
16 patched
12 Mitigation rules
- Unauthenticated Stored Cross-Site Scripting via media[].href Parameter vulnerability<= 5.97.0Feb 16, 2026
- Authenticated (Subscriber+) Stored Cross-Site Scripting via displayName Parameter vulnerability<= 5.93.1Jan 7, 2026
- Unauthenticated Stored Cross-Site Scripting via `author` Parameter vulnerability<= 5.80.2Jul 30, 2025
- Missing Authorization to Authenticated (Subscriber+) Import Cancellation vulnerability<= 5.61.0Nov 18, 2024
- Reflected Cross-Site Scripting via 's' vulnerability<= 5.47.0Apr 19, 2024
- Missing Authorization to Authenticated (Subscriber+) Coupon Search vulnerability<= 5.46.0Apr 17, 2024
- Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending vulnerability<= 5.46.0Apr 16, 2024
- Improper Authorization via submit_review vulnerability<= 5.38.12Feb 7, 2024
- Authenticated Arbitrary File Upload vulnerability<= 5.38.9Jan 9, 2024
- Broken Access Control vulnerability<= 5.38.1Dec 27, 2023
- Broken Access Control vulnerability<= 5.36.0Oct 6, 2023
- Contributor+ Stored XSS vulnerability< 5.17.0Jan 24, 2023
- Contributor+ LFI vulnerability< 5.16.0Jan 23, 2023
- Authenticated Broken Access Control vulnerability<= 5.3.5Sep 22, 2022
- Cross-Site Request Forgery (CSRF) vulnerability<= 5.3.5Sep 22, 2022
- Sensitive Information Disclosure vulnerability<= 5.3.5Sep 22, 2022