CVE-2024-8277

🗓️ 11 Sep 2024 08:31:05Reported by WordfenceType

WooCommerce Photo Reviews Premium plugin for WordPress authentication bypass vulnerability in versions 1.3.13.2 and earlie

Reporter	Title	Published	Views	Family All 11
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Villatheme Woocommerce_Photo_Reviews	12 Sep 202414:40	–	githubexploit
Circl	CVE-2024-8277	11 Sep 202411:59	–	circl
Cvelist	CVE-2024-8277 WooCommerce Photo Reviews Premium <= 1.3.13.2 - Authentication Bypass to Account Takeover and Privilege Escalation	11 Sep 202408:31	–	cvelist
NVD	CVE-2024-8277	11 Sep 202409:15	–	nvd
Patchstack	WordPress WooCommerce Photo Reviews Premium plugin <= 1.3.13.2 - Authentication Bypass to Account Takeover and Privilege Escalation vulnerability	11 Sep 202401:01	–	patchstack
Patchstack	WordPress WooCommerce Photo Reviews - Review Reminders - Review for Discounts Plugin <= 1.3.13.2 is vulnerable to Broken Authentication	11 Sep 202400:00	–	patchstack
Positive Technologies	PT-2024-38907 · WordPress · Woocommerce Photo Reviews Premium	11 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-8277	4 Feb 202522:27	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2024-8277	11 Sep 202400:00	–	vulncheck_kev
Vulnrichment	CVE-2024-8277 WooCommerce Photo Reviews Premium <= 1.3.13.2 - Authentication Bypass to Account Takeover and Privilege Escalation	11 Sep 202408:31	–	vulnrichment

NVD

Vulners

Node

villatheme woocommerce_photo_reviewsRange<1.3.14wordpress

[
  {
    "vendor": "villatheme",
    "product": "WooCommerce Photo Reviews Premium",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.3.13.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
codecanyon	www.codecanyon.net/item/woocommerce-photo-reviews/21245349
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/a1e2d370-a716-4d6b-8e23-74db2fbd0760

08 Apr 2026 17:12Current

9.7High risk

Vulners AI Score9.7

CVSS 3.19.8

EPSS0.5214

SSVC