WordPress Plugin Vulnerabilities

WP Customer Reviews < 3.0.9 - CSRF & XSS

Description

The WP Customer Reviews WordPress plugin was affected by a CSRF & XSS security vulnerability.

Affects Plugins

Plugin icon
wp-customer-reviews
Fixed in 3.0.9

References

CVE
CVE-2016-10901
CVE
CVE-2016-10902

Miscellaneous

Verified
No
WPVDB ID
6f8b4dc4-25cc-47d8-86c2-00867b615c83

Timeline

Publicly Published
2016-04-05 (about 10 years ago)
Added
2019-08-21 (about 6 years ago)
Last Updated
2020-08-18 (about 5 years ago)

Other

Published
Title
Published
2014-12-19
Title
iTwitter <= 0.04 - XSS & CSRF
Published
2015-09-17
Title
WP Shop <= 3.4.3.18 - Cross-Site Scripting (XSS) & CSRF
Published
2016-11-17
Title
Relevanssi Premium < 1.14.6.1 - SQL Injection & PHP Object Injection
Published
2015-05-15
Title
Encrypted Contact Form < 1.1 - CSRF & XSS
Published
2021-07-02
Title
Workreap < 2.2.2 - Multiple CSRF + IDOR Vulnerabilities