Vulnerability in Customer Reviews For Woocommerce

CVE-2026-14941

The Customer Reviews for WooCommerce WordPress plugin before 5.116.0 does not perform nonce or capability checks on several settings-related AJAX actions, allowing users with minimal permissions such as Subscribers to invoke administrative…

Affected products

  • Unknown Customer Reviews For Woocommerce — versions 0

References