The Customer Reviews Plugin for WordPress has a security flaw that could let unauthenticated attackers alter its settings and add malicious web scripts to the site. This flaw affects all versions of the plugin up to 3.0.8 and is caused by the lack of a certain security check in the ‘update_options’ function. To exploit this flaw
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
