Ivole

12 CVEs across 1 Ivole products. Browse Ivole vulnerabilities, severities, and proof-of-concept exploits.

Ivole products with known CVEs

ProductCVEs
Customer Reviews For Woocommerce12
Ivole CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-13771Medium6.42026-07-09The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'color' Shortcode Attribute in all versions up to, a…
CVE-2026-3355Medium6.12026-04-16The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘crsearch’ parameter in all versions up to, a…
CVE-2026-4664Medium5.32026-04-10The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.103.0. This is due to…
CVE-2026-1316High7.22026-02-12The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'media[].href' parameter in all versions up to…
CVE-2025-14891Medium6.42026-01-07The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'displayName' parameter in all versions up to, a…
CVE-2025-5720Medium6.42025-07-31The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘author’ parameter in all versions up to, and in…
CVE-2024-10614Medium4.32024-11-16The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the cancel_import() functio…
CVE-2024-3731Medium6.12024-04-19The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and incl…
CVE-2024-3869Medium4.32024-04-16The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'woocommerce_js…
CVE-2024-3243Medium4.32024-04-16The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the send_test_email(…
CVE-2024-1044Medium5.32024-02-29The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'submit_r…
CVE-2023-6979High8.82024-01-11The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ivole_import_uploa…