Gowebsolutions Wp Customer Reviews
7 CVEs affecting Gowebsolutions Wp Customer Reviews. Latest disclosed: 2024-04-15. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-10902 | High | 8.8 | 2019-08-21 | The wp-customer-reviews plugin before 3.0.9 for WordPress has CSRF in the admin tools. |
CVE-2021-24135 | Medium | 6.1 | 2021-03-18 | Unvalidated input and lack of output encoding in the WP Customer Reviews WordPress plugin, versions before 3.4.3, lead to multiple Stored Cross-Site Scripting… |
CVE-2016-10901 | Medium | 6.1 | 2019-08-21 | The wp-customer-reviews plugin before 3.0.9 for WordPress has XSS in the admin tools. |
CVE-2024-1849 | Medium | 5.4 | 2024-04-15 | The WP Customer Reviews WordPress plugin before 3.7.1 does not validate a parameter allowing contributor and above users to redirect a page to a malicious URL |
CVE-2021-24296 | Medium | 4.8 | 2021-05-24 | The WP Customer Reviews WordPress plugin before 3.5.6 did not sanitise some of its settings, allowing high privilege users such as administrators to set XSS pa… |
CVE-2023-4648 | Medium | 4.4 | 2023-10-20 | The WP Customer Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 3.6.6 due to ins… |
CVE-2023-4686 | Medium | 4.3 | 2023-11-22 | The WP Customer Reviews plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.6.6 via the ajax_enabled_posts… |