Skip to main content

Customer Reviews For Woocommerce CVE-2023-51692

MEDIUM
Missing Authorization (CWE-862)
2024-02-28 audit@patchstack.com
WordPress Authentication Bypass Customer Reviews For Woocommerce
4.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
4.3 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None

Lifecycle Timeline

1
CVE Published
Feb 28, 2024 - 19:15 cve.org
MEDIUM 4.3

DescriptionCVE.org

Missing Authorization vulnerability in CusRev Customer Reviews for WooCommerce.This issue affects Customer Reviews for WooCommerce: from n/a through 5.38.1.

AnalysisAI

Missing Authorization vulnerability in CusRev Customer Reviews for WooCommerce.38.1. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Missing Authorization (CWE-862), which allows attackers to access resources or perform actions without proper authorization checks. Missing Authorization vulnerability in CusRev Customer Reviews for WooCommerce.38.1. Affected products include: Cusrev Customer Reviews For Woocommerce. Version information: through 5.38.1..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement role-based access control, validate authorization on every request server-side, apply principle of least privilege.

More in Customer Reviews For Woocommerce

View all
CVE-2026-76585 HIGH POC
8.8 Aug 30

Stored Cross-Site Scripting in Customer Reviews for WooCommerce (all versions before 5.118.0) lets unauthenticated attac
CVE-2023-0080 HIGH POC
8.8 Feb 13

The Customer Reviews for WooCommerce WordPress plugin before 5.16.0 does not validate one of its shortcode attribute, wh
CVE-2026-12684 MEDIUM POC
6.5 Jul 16

Unauthenticated media file upload in the Customer Reviews for WooCommerce WordPress plugin (all versions before 5.113.0)
CVE-2026-14941 MEDIUM POC
5.4 Aug 10

Missing authorization on multiple AJAX settings handlers in Customer Reviews for WooCommerce (all versions before 5.116.
CVE-2022-38470 HIGH
8.8 Sep 23

Cross-Site Request Forgery (CSRF) vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress. Rated

CVE-2022-38134 HIGH
8.8 Sep 23

Authenticated (subscriber+) Broken Access Control vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at W
CVE-2022-40194 HIGH
7.5 Sep 23

Unauthenticated Sensitive Information Disclosure vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at Wo
CVE-2026-6176 HIGH
7.2 Aug 28

Stored cross-site scripting in the Customer Reviews for WooCommerce WordPress plugin (versions up to and including 5.106
CVE-2026-13771 MEDIUM
6.4 Jul 09

Stored Cross-Site Scripting in the Customer Reviews for WooCommerce WordPress plugin (all versions ≤ 5.113.0) allows con
CVE-2024-3731 MEDIUM
6.1 Apr 19

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' pa
CVE-2024-1044 MEDIUM
5.3 Feb 29

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a mi
CVE-2024-3869 MEDIUM
4.3 Apr 16

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing

Same weakness CWE-862 – Missing Authorization

View all
CVE-2023-52163 HIGH POC
8.8
CVE-2025-6205 CRITICAL POC
9.1
CVE-2025-20362 HIGH POC
8.6
CVE-2017-9232 CRITICAL POC
9.8
CVE-2023-6875 CRITICAL POC
9.8
CVE-2024-4898 CRITICAL POC
9.8
CVE-2023-32117 CRITICAL POC
9.8
CVE-2020-36719 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2023-51692 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy