Medium · 5.3 CVE-2024-34763 EUVD-2024-35033GHSA-mrcq-5w4f-hvcr

WordPress Builder for WooCommerce reviews shortcodes – ReviewShort plugin <= 1.01.5 - Broken Access Control vulnerability

Published Jun 11, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Saleswonder Team: Tobias Product: Builder for WooCommerce reviews shortcodes – ReviewShort Category: Web / CMS

Description

Missing Authorization vulnerability in Saleswonder Team: Tobias Builder for WooCommerce reviews shortcodes – ReviewShort woo-product-reviews-shortcode.This issue affects Builder for WooCommerce reviews shortcodes – ReviewShort: from n/a through <= 1.01.5.

Affected products

Vendor	Product	Affected	Fixed
Saleswonder Team: Tobias	Builder for WooCommerce reviews shortcodes – ReviewShort	≤ 1.01.5	—

References

https://patchstack.com/database/Wordpress/Plugin/woo-product-reviews-shortcode/vulnerability/wordpress-builder-for-woocommerce-reviews-shortcodes-reviewshort-plugin-1-01-5-broken-access-control-vulnerability?_s_id=cve vdb-entry