Customer Reviews for WooCommerce, CVE-2024-1044

CVE, Research URL: CVE-2024-1044
Home page URL: Security reports for Customer Reviews for WooCommerce
Application: Customer Reviews for WooCommerce
Published on: Feb 29, 2024
Research Description: The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'submit_review' function in all versions up to, and including, 5.38.12. This makes it possible for unauthenticated attackers to submit reviews with arbitrary email addresses regardless of whether reviews are globally enabled.
Affected versions: Min -, max 5.39.0.
Status: vulnerable