What’s Vulnerable › Products

VillaTheme Photo Reviews for WooCommerce vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your VillaTheme Photo Reviews for WooCommerce version is affected

Latest VillaTheme Photo Reviews for WooCommerce vulnerabilities

• CVE-2026-111404 — WordPress Photo Reviews for WooCommerce plugin <= 1.2.31 - Race Condition vulnerability (CVSS 3.7)
• CVE-2026-100161 — Photo Reviews for WooCommerce <= 1.2.30 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'wcpr_image_upload_id' Parameter (CVSS 7.2)
• CVE-2026-100515 — WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-101923 — Photo Reviews for WooCommerce <= 1.2.30 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'wcpr_image_upload_id' Parameter (CVSS 8.1)
• CVE-2026-100517 — WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Insecure Direct Object References (IDOR) vulnerability (CVSS 7.5)