Bompus Wp Customer Reviews
3 CVEs affecting Bompus Wp Customer Reviews. Latest disclosed: 2026-02-19. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-14452 | High | 7.2 | 2026-02-19 | The WP Customer Reviews plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpcr3_fname' parameter in all versions up to, and includi… |
CVE-2023-4648 | Medium | 4.4 | 2023-10-20 | The WP Customer Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 3.6.6 due to ins… |
CVE-2023-4686 | Medium | 4.3 | 2023-11-22 | The WP Customer Reviews plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.6.6 via the ajax_enabled_posts… |