Vulnerabilities > Gowebsolutions > WP Customer Reviews > 3.6.1
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-11-22 | CVE-2023-4686 | Unspecified vulnerability in Gowebsolutions WP Customer Reviews The WP Customer Reviews plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.6.6 via the ajax_enabled_posts function. | 4.3 |
2023-10-20 | CVE-2023-4648 | Cross-site Scripting vulnerability in Gowebsolutions WP Customer Reviews The WP Customer Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 3.6.6 due to insufficient input sanitization and output escaping. | 4.8 |