plugin
4 known security issues reported for the Wp Product Review WordPress plugin. Most recent disclosed May 14, 2020.
Running Wp Product Review on your site? Check whether your installed version is affected.
Scan your site freeThe WP Product Review Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.7.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user...
Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered by Sucuri in WordPress WP Product Review Lite plugin (versions <= 3.7.5).
The WP Product Review Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.7.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user...
All user input data is sanitized but the WordPress function used can be bypassed when the parameter is set inside an HTML attribute. A successful attack results in malicious scripts being injected in all the site’s products.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free