CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

NVD•added 2026/07/16 7:16 a.m.•32 views

CVE-2026-12684

The Customer Reviews for WooCommerce WordPress plugin before 5.113.0 does not perform authentication, capability, or nonce checks on one of its media upload AJAX actions when the review media attachment feature is enabled, allowing unauthenticated users to upload media files bounded to an image a...

6.5CVSS0.00426EPSS

SaveExploits0References1

attackerkb•added 2026/07/16 6:00 a.m.•21 views

CVE-2026-12684

6.1AI score0.00426EPSS

SaveExploits0References1

CVE•added 2026/07/16 6:00 a.m.•51 views

CVE-2026-12684

The Customer Reviews for WooCommerce WordPress plugin versions prior to 5.113.0 is vulnerable to unauthenticated media uploads. The flaw exists because one of its media upload AJAX actions fails to perform authentication, capability, or nonce checks when the review media attachment feature is act...

6.5CVSS5.9AI score0.00426EPSS

SaveExploits0References1

Vulnrichment•added 2026/07/16 6:00 a.m.•21 views

CVE-2026-12684 Customer Reviews for WooCommerce < 5.113.0 - Unauthenticated Arbitrary Media Upload via cr_upload_media

5.9AI score0.00426EPSS

SaveExploits0References1

EUVD•added 2026/07/16 6:00 a.m.•34 views

EUVD-2026-44877

6.5CVSS6.1AI score0.00426EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2026/07/16 12:00 a.m.•4 views

CVE-2026-12684: Unrestricted Upload of File with Dangerous Type

6.5CVSS5.8AI score0.00426EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by