High · 7.1 CVE-2026-56043 EUVD-2026-39704GHSA-c8g2-rm3w-x2p5

WordPress Customer Reviews for WooCommerce plugin <= 5.110.1 - Cross Site Scripting (XSS) vulnerability

Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by Patchstack

Vendor: CusRev Product: Customer Reviews for WooCommerce Category: Web / CMS

Description

Unauthenticated Cross Site Scripting (XSS) in Customer Reviews for WooCommerce <= 5.110.1 versions.

Affected products

Vendor	Product	Affected	Fixed
CusRev	Customer Reviews for WooCommerce	≤ 5.110.1	—

References

https://patchstack.com/database/wordpress/plugin/customer-reviews-woocommerce/vulnerability/wordpress-customer-reviews-for-woocommerce-plugin-5-110-1-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry