Customer Reviews for WooCommerce

Vulnerabilities 24Slug customer-reviews-woocommerceLatest version 5.109.0WordPress.org →

Minimum safe version

5.104.0

Update to 5.104.0 or later to address 24 fixable vulnerabilities

Latest available5.109.0 ✓
N/A
2026-02-12< 5.98.0

Customer Reviews for WooCommerce <= 5.97.0 - Unauthenticated Stored Cross-Site Scripting via media[].href Parameter

WordfenceCVE
N/A
2026-04-09< 5.104.0

Customer Reviews for WooCommerce <= 5.103.0 - Unauthenticated Authentication Bypass to Arbitrary Review Submission via 'key' Parameter

WordfenceCVE
Medium 6.4
2025-07-31< 5.81.0

Customer Reviews for WooCommerce <= 5.80.2 - Unauthenticated Stored Cross-Site Scripting via `author` Parameter

EUVDWordfencePatchstackCVE
Medium 4.3
2024-11-18< 5.62.0

WordPress Customer Reviews for WooCommerce Plugin <= 5.61.0 is vulnerable to Broken Access Control

PatchstackCVEWordfence
N/A
< 5.38.2

Customer Reviews for WooCommerce &lt; 5.38.2 - Missing Authorization via manual review reminders

WPScan
N/A
< 5.38.2

Customer Reviews for WooCommerce &lt; 5.38.2 - Cross-Site Request Forgery via manual review reminders

WPScan
Medium 4.3
2024-04-17< 5.47.0

WordPress Customer Reviews for WooCommerce Plugin <= 5.46.0 is vulnerable to Broken Access Control

PatchstackCVEWordfence
N/A
< 5.36.1

Customer Reviews for WooCommerce &lt; 5.36.1 - Missing Authorization

WPScan
Medium 4.3
2024-12-27< 5.38.2

WordPress Customer Reviews for WooCommerce Plugin <= 5.38.1 is vulnerable to Broken Access Control

PatchstackCVEWordfence
N/A
2023-11-19< 5.38.2

Customer Reviews for WooCommerce <= 5.38.1 - Cross-Site Request Forgery via manual review reminders

Wordfence
N/A
2023-11-19< 5.38.2

Customer Reviews for WooCommerce <= 5.38.1 - Missing Authorization via manual review reminders

Wordfence
N/A
2023-10-04< 5.36.1

Customer Reviews for WooCommerce <= 5.36.0 - Missing Authorization

Wordfence