PT-2026-95771

Name of the Vulnerable Software and Affected Versions WP Customer Reviews versions prior to 3.7.9 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting. This occurs via the wpcr3 fname parameter, enabling the...

PT-2026-20619

The WP Customer Reviews plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpcr3 fname' parameter in all versions up to, and including, 3.7.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...