High · 7.5 CVE-2026-96823 EUVD-2026-89876GHSA-4q4m-x6wx-4rcv

WordPress Customer Reviews for WooCommerce plugin <= 5.120.0 - Arbitrary Content Deletion vulnerability

Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack

Vendor: CusRev Product: Customer Reviews for WooCommerce Category: Web / CMS

Description

Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce <= 5.120.0 versions.

Affected products

Vendor	Product	Affected	Fixed
CusRev	Customer Reviews for WooCommerce	≤ 5.120.0	—

References

https://patchstack.com/database/wordpress/plugin/customer-reviews-woocommerce/vulnerability/wordpress-customer-reviews-for-woocommerce-plugin-5-120-0-arbitrary-content-deletion-vulnerability?_s_id=cve vdb-entry