Medium · 4.3 CVE-2022-38134 EUVD-2022-40736GHSA-6v4j-97pm-7wc2

WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Authenticated Broken Access Control vulnerability

Published Sep 23, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated (subscriber+) Broken Access Control vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress.

Vendor	Product	Affected	Fixed
CusRev	Customer Reviews for WooCommerce (WordPress plugin)	<= 5.3.5 – ≤ 5.3.5	—