woo-photo-reviews vulnerabilities

CVEs whose affected-version data names the woo-photo-reviews package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

3 CVEsRSS

CVE-2026-111404Low· 3.7

1w ago

WordPress Photo Reviews for WooCommerce plugin <= 1.2.31 - Race Condition vulnerability

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in VillaTheme Photo Reviews for WooCommerce woo-photo-reviews allows Leveraging Race Conditions.This issue affects Photo Reviews fo…

▾ SunlitVillaTheme · woo-photo-reviewsEPSS 0.20%via CVEORG

CVE-2026-100515High· 7.1

1mo ago

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Photo Reviews for WooCommerce woo-photo-reviews allows Reflected XSS.This issue affects Photo Reviews for WooCommerce: from …

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Photo Reviews for WooCommerce woo-photo-reviews allows Reflected XSS.This issue affects Photo Reviews for WooCommerce: from …

▾ TwilightVillaTheme · woo-photo-reviewsEPSS 0.19%via NVD

CVE-2026-100517High· 7.5

1mo ago

Unauthenticated Insecure Direct Object References (IDOR) in Photo Reviews for WooCommerce <= 1.2.30 versions.

▾ TwilightVillaTheme · woo-photo-reviewsEPSS 0.29%via NVD