1862 matches found
PT-2026-103875
Unauthenticated Insecure Direct Object References IDOR in Photo Reviews for WooCommerce = 1.2.30 versions...
CVE-2026-96823
Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce = 5.120.0 versions...
CVE-2026-94078
Unauthenticated Cross Site Scripting XSS in Site Reviews = 8.3.1 versions...
CVE-2026-96823 WordPress Customer Reviews for WooCommerce plugin <= 5.120.0 - Arbitrary Content Deletion vulnerability
Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce = 5.120.0 versions...
EUVD-2026-89876
Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce = 5.120.0 versions...
CVE-2026-96823 WordPress Customer Reviews for WooCommerce plugin <= 5.120.0 - Arbitrary Content Deletion vulnerability
Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce = 5.120.0 versions...
CVE-2026-96823
The Customer Reviews for WooCommerce WordPress plugin (versions
CVE-2026-94078 WordPress Site Reviews plugin <= 8.3.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Site Reviews = 8.3.1 versions...
CVE-2026-94078
The Site Reviews WordPress plugin, affecting versions
EUVD-2026-89833
Unauthenticated Cross Site Scripting XSS in Site Reviews = 8.3.1 versions...
CVE-2026-94078 WordPress Site Reviews plugin <= 8.3.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Site Reviews = 8.3.1 versions...
PT-2026-103165
Unauthenticated Cross Site Scripting XSS in Site Reviews = 8.3.1 versions...
CVE-2026-94078: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Site Reviews = 8.3.1 versions...
CVE-2026-96823: Missing Authorization
Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce = 5.120.0 versions...
PT-2026-103208
Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce = 5.120.0 versions...
EUVD-2026-88578
mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endpoint in ProdCommController. Unauthenticated attackers can delete arbitrary product reviews by supplying the prodCommId parameter without authorization checks...
CVE-2026-102362: Missing Authentication for Critical Function
mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endpoint in ProdCommController. Unauthenticated attackers can delete arbitrary product reviews by supplying the prodCommId parameter without authorization checks...
CVE-2026-102362 mall4j through 4.0 Missing Authentication in Product Review Deletion
mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endpoint in ProdCommController. Unauthenticated attackers can delete arbitrary product reviews by supplying the prodCommId parameter without authorization checks...
CVE-2026-102362 mall4j through 4.0 Missing Authentication in Product Review Deletion
mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endpoint in ProdCommController. Unauthenticated attackers can delete arbitrary product reviews by supplying the prodCommId parameter without authorization checks...
CVE-2026-102362 mall4j through 4.0 Missing Authentication in Product Review Deletion
mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endpoint in ProdCommController. Unauthenticated attackers can delete arbitrary product reviews by supplying the prodCommId parameter without authorization checks...