Skip to content
OpenAdvisories

Vendor

helpfulcrowd

1 known vulnerabilities.

Products

Helpfulcrowd Product Reviews 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-8499

    Helpfulcrowd Product Reviews <= 1.2.9 - Inccorect Authorization via Type Juggling in 'token' Parameter to Arbitrary Settings Update

    The Helpfulcrowd Product Reviews plugin for WordPress is vulnerable to Authorization Bypass via PHP Type Juggling in versions up to, and including, 1.2.9. This is due to the `helpfulcrowd_validate_token()` function using a loose comparison operator (`!=`) ins…

    helpfulcrowd Helpfulcrowd Product Reviews Web / CMS