CVE-2026-94274

The YayReviews WordPress plugin (versions 1.0.4 through 1.4.0 ) contains a vulnerability where an API route lacks proper access restrictions. This oversight allows unauthenticated attackers to retrieve individual customer review records, including those still pending moderation. Consequently, att...