CVE-2024-8277 WooCommerce Photo Reviews Premium <= 1.3.13.2 - Authentication Bypass to Account Takeover and Privilege Escalation

🗓️ 11 Sep 2024 08:31:05Reported by WordfenceType

WooCommerce Photo Reviews Premium plugin authentication bypass vulnerabilit

Reporter	Title	Published	Views	Family All 11
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Villatheme Woocommerce_Photo_Reviews	12 Sep 202414:40	–	githubexploit
Circl	CVE-2024-8277	11 Sep 202411:59	–	circl
CVE	CVE-2024-8277	11 Sep 202408:31	–	cve
NVD	CVE-2024-8277	11 Sep 202409:15	–	nvd
Patchstack	WordPress WooCommerce Photo Reviews Premium plugin <= 1.3.13.2 - Authentication Bypass to Account Takeover and Privilege Escalation vulnerability	11 Sep 202401:01	–	patchstack
Patchstack	WordPress WooCommerce Photo Reviews - Review Reminders - Review for Discounts Plugin <= 1.3.13.2 is vulnerable to Broken Authentication	11 Sep 202400:00	–	patchstack
Positive Technologies	PT-2024-38907 · WordPress · Woocommerce Photo Reviews Premium	11 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-8277	4 Feb 202522:27	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2024-8277	11 Sep 202400:00	–	vulncheck_kev
Vulnrichment	CVE-2024-8277 WooCommerce Photo Reviews Premium <= 1.3.13.2 - Authentication Bypass to Account Takeover and Privilege Escalation	11 Sep 202408:31	–	vulnrichment

[
  {
    "vendor": "villatheme",
    "product": "WooCommerce Photo Reviews Premium",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.3.13.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
codecanyon	www.codecanyon.net/item/woocommerce-photo-reviews/21245349
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/a1e2d370-a716-4d6b-8e23-74db2fbd0760

08 Apr 2026 17:12Current

CVSS 3.19.8

EPSS0.016

CWE-288