What’s Vulnerable › Products

bompus WP Customer Reviews vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your bompus WP Customer Reviews version is affected

Latest bompus WP Customer Reviews vulnerabilities

• CVE-2026-11608 — WP Customer Reviews <= 3.7.8 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter (CVSS 6.1)
• CVE-2025-14452 — WP Customer Reviews <= 3.7.5 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter (CVSS 7.2)
• CVE-2024-1849 — WP Customer Reviews < 3.7.1 - Malicious Redirect via HTTP-EQUIV Injection (CVSS 5.4)
• CVE-2023-4686 — WP Customer Reviews <= 3.6.6 - Authenticated (Subscriber+) Sensitive Information Exposure (CVSS 4.3)
• CVE-2023-4648 — WP Customer Reviews <= 3.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 4.8)
• CVE-2021-24296 — WP Customer Reviews < 3.5.6 - Authenticated Stored Cross-Site Scripting (XSS) (CVSS 4.8)
• CVE-2021-24135 — WP Customer Reviews < 3.4.3 - Multiple Unauthenticated and Low Priv Authenticated Stored XSS (CVSS 6.1)
• CVE-2016-10902 — (CVSS 8.8)
• CVE-2016-10901 — (CVSS 6.1)