Customer Reviews Collector For Woocommerce Vulnerabilities

The Customer Reviews Collector for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'email-text' parameter in all versions up to, and including, 4.6.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitr...

CVSS:

6.1

Affected:

up to 4.6.1

Fixed in:

4.7

Disclosed:

Nov 26, 2025

CVE-2025-12123 on NVD →

Multiple plugins for WordPress by Trustindex.io are vulnerable to arbitrary file uploads due to missing file type validation in the ~/tabs/feature_request.php file in various versions. This makes it possible for authenticated attackers, with editor-level access and above, to upload arbitrary files on the affected site'...

CVSS:

6.6

Affected:

up to 3.9

Fixed in:

4.0

Disclosed:

Nov 22, 2023

CVE-2023-48275 on NVD →