Skip to content
OpenAdvisories

Vendor

ivole

16 known vulnerabilities.

Products

Customer Reviews for WooCommerce 16
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-89055 Public exploit

    Customer Reviews for WooCommerce <= 5.120.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'items[][media]' Parameter

    The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.120.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possi…

    ivole Customer Reviews for WooCommerce Web / CMS