Medium · 4.3 CVE-2022-38470 EUVD-2022-41053GHSA-rpm3-vf32-w565

WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Cross-Site Request Forgery (CSRF) vulnerability

Published Sep 23, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress.

Vendor	Product	Affected	Fixed
CusRev	Customer Reviews for WooCommerce (WordPress plugin)	<= 5.3.5 – ≤ 5.3.5	—