Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
wp-customer-reviews
WordPress
· Plugin
9 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
WP Customer Reviews <= 3.7.8 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter
CVE-2026-11608
wp-customer-reviews
WordPress
Medium
Fix reported
2026-09-19
WP Customer Reviews <= 3.7.0 - Authenticated (Contributor+) Malicious Redirect via HTTP-EQUIV Injection
CVE-2024-1849
wp-customer-reviews
WordPress
Medium
Fix reported
2026-09-04
WP Customer Reviews <= 3.7.5 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter
CVE-2025-14452
wp-customer-reviews
WordPress
High
Fix reported
2026-02-19
WP Customer Reviews <= 3.5.5 - Authenticated Stored Cross-Site Scripting
CVE-2021-24296
wp-customer-reviews
WordPress
Medium
Fix reported
2024-01-22
WP Customer Reviews <= 3.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2023-4648
wp-customer-reviews
WordPress
Medium
Fix reported
2024-01-22
WP Customer Reviews <= 3.0.8 - Cross-Site Request Forgery
CVE-2016-10902
wp-customer-reviews
WordPress
High
Fix reported
2024-01-22
Customer Reviews < 3.0.9 - Cross-Site Scripting
CVE-2016-10901
wp-customer-reviews
WordPress
Medium
Fix reported
2024-01-22
WP Customer Reviews <= 3.4.2 - Multiple Stored Cross-Site Scripting
CVE-2021-24135
wp-customer-reviews
WordPress
Medium
Fix reported
2024-01-22
WP Customer Reviews <= 3.6.6 - Authenticated (Subscriber+) Sensitive Information Exposure
CVE-2023-4686
wp-customer-reviews
WordPress
Medium
Fix reported
2024-01-22
