UNKNOWN NVD

CVE-2026-76585

The Customer Reviews for WooCommerce WordPress plugin before 5.118.0 does not sanitise and escape the content of customer reviews received via one of its endpoi

The Customer Reviews for WooCommerce WordPress plugin before 5.118.0 does not sanitise and escape the content of customer reviews received via one of its endpoints, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks.

References

https://wpscan.com/vulnerability/7d539fba-d47e-461d-b40f-1aa8f535d506/

Published: 2026-08-30 · Source: NVD · Feed updated: 2026-08-30

This unknown severity vulnerability was published on 2026-08-30 via NVD.

vulnfeed aggregates 11450 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.