Medium · 4.3 CVE-2024-29093 EUVD-2024-26132GHSA-3442-jw62-mjxj

WordPress Builder for WooCommerce reviews shortcodes – ReviewShort plugin <= 1.01.3 - Cross Site Request Forgery (CSRF) vulnerability

Published Mar 19, 2024 · Updated May 11, 2026 · Assigned by Patchstack

Vendor: Saleswonder Team: Tobias Product: Builder for WooCommerce reviews shortcodes – ReviewShort Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in Saleswonder Team: Tobias Builder for WooCommerce reviews shortcodes – ReviewShort woo-product-reviews-shortcode.This issue affects Builder for WooCommerce reviews shortcodes – ReviewShort: from n/a through <= 1.01.3.

Affected products

Vendor	Product	Affected	Fixed
Saleswonder Team: Tobias	Builder for WooCommerce reviews shortcodes – ReviewShort	≤ 1.01.3	—

References

https://patchstack.com/database/Wordpress/Plugin/woo-product-reviews-shortcode/vulnerability/wordpress-builder-for-woocommerce-reviews-shortcodes-reviewshort-plugin-1-01-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry