Plugin icon

WP Customer Reviews

wp-customer-reviews

Vulnerabilities:

7

Last Updated:

December 12, 2025

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-02-18
Title
WP Customer Reviews < 3.7.6 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter
Fixed in
Fixed in 3.7.6
CVSS
7.2 (high)
Published
2024-03-25
Title
WP Customer Reviews < 3.7.1 - Malicious Redirect via HTTP-EQUIV Injection
Fixed in
Fixed in 3.7.1
CVSS
2.7 (low)
Published
2023-10-31
Title
WP Customer Reviews < 3.6.7 - Authenticated (Subscriber+) Sensitive Information Exposure
Fixed in
Fixed in 3.6.7
CVSS
4.3 (medium)
Published
2023-09-13
Title
WP Customer Reviews < 3.6.7 - Admin+ Stored XSS
Fixed in
Fixed in 3.6.7
CVSS
4.4 (medium)
Published
2021-05-04
Title
WP Customer Reviews < 3.5.6 - Authenticated Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 3.5.6
CVSS
5.5 (medium)
Published
2020-08-20
Title
WP Customer Reviews < 3.4.3 - Multiple Unauthenticated and Low Priv Authenticated Stored XSS
Fixed in
Fixed in 3.4.3
CVSS
9.6 (critical)
Published
2016-04-05
Title
WP Customer Reviews < 3.0.9 - CSRF & XSS
Fixed in
Fixed in 3.0.9
CVSS
7.5 (high)