Skip to content
Noroxi

WP Customer Reviews

wp-customer-reviews · plugin

Known security vulnerabilities for WP Customer Reviews. Find out in seconds which version runs on your site with WP Lens.

6 known vulnerabilities

latest Sep 19, 2026

Vulnerabilities

  • CVE-2016-10902

    The wp-customer-reviews plugin before 3.0.9 for WordPress has CSRF in the admin tools.

    High 8.8

  • CVE-2025-14452

    WP Customer Reviews <= 3.7.5 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter

    High 7.2

  • CVE-2026-11608

    WP Customer Reviews <= 3.7.8 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter

    Medium 6.1

  • CVE-2016-10901

    The wp-customer-reviews plugin before 3.0.9 for WordPress has XSS in the admin tools.

    Medium 6.1

  • CVE-2023-4648

    WP Customer Reviews <= 3.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting

    Medium 4.8

  • CVE-2023-4686

    WP Customer Reviews <= 3.6.6 - Authenticated (Subscriber+) Sensitive Information Exposure

    Medium 4.3

← Back to directory