Stampedio Product Reviews Vulnerabilities

The Stamped.io Product Reviews & UGC for WooCommerce plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the bulk_reviews_ajax, bulk_export_review, and clear_reviews_cache functions called via nopriv AJAX actions in versions up to, and including, 2.3.2....

CVSS:

6.5

Affected:

up to 2.3.2

Fixed in:

2.3.3

Disclosed:

Apr 13, 2023

CVE-2023-30479 on NVD →

The Stamped.io Product Reviews & UGC for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce verification on the clear_reviews_cache function called via AJAX actions in versions up to, and including, 2.3.3. This makes it possible for unauthenticated attackers to export revi...

CVSS:

4.3

Affected:

up to 2.3.3

Fixed in:

2.4.0

Disclosed:

Apr 13, 2023