Plugin icon

Photo Reviews for WooCommerce

woo-photo-reviews

Vulnerabilities:

4

Last Updated:

September 29, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-10-09
Title
Photo Reviews for WooCommerce < 1.2.31 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'wcpr_image_upload_id' Parameter
Fixed in
Fixed in 1.2.31
CVSS
7.2 (high)
Published
2026-10-03
Title
Photo Reviews for WooCommerce < 1.2.31 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.2.31
CVSS
6.1 (medium)
Published
2026-10-02
Title
Photo Reviews for WooCommerce < 1.2.31 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'wcpr_image_upload_id' Parameter
Fixed in
Fixed in 1.2.31
CVSS
8.1 (high)
Published
2026-10-01
Title
Photo Reviews for WooCommerce < 1.2.31 - Unauthenticated Insecure Direct Object Reference
Fixed in
Fixed in 1.2.31
CVSS
5.3 (medium)