Twb Woocommerce Reviews Vulnerabilities

The TWB Woocommerce Reviews plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.7. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a si...

CVSS:

4.3

Affected:

up to 1.7.7

Fixed in:

1.7.8

Disclosed:

Mar 27, 2025

CVE-2025-30801 on NVD →

The TWB Woocommerce Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to...

CVSS:

4.4

Affected:

up to 1.7.5

Fixed in:

1.7.6

Disclosed:

Nov 7, 2023

CVE-2023-47653 on NVD →