SecAlerts
c

cusrev

Security Risk Profile

34
/100
low

Security Risk Score

Comprehensive risk assessment based on 16 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from September 23, 2022 to present

16
Total CVEs
7
Critical+High
0
Exploited
4
Unpatched

Threat Assessment

Avg CVSS
6.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
34/100
low
🆕 1Fresh (<7d)📈 1 in Last 30 Days

Severity Distribution

Critical
0
High
7
Medium
9
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
6

Age Distribution

Common Weaknesses (CWE)

1
XSS
4
2
Malicious File Upload
1
3
Path Traversal
1
4
CSRF
1
5
Infoleak
1

Most Affected Products

1. CusRev Customer Reviews For Woocommerce Wordpress13
2. CusRev Customer Reviews for WooCommerce5
3. WooCommerce Customer Reviews for WooCommerce4
4. WordPress Customer Reviews for WooCommerce1
5. Automattic Customer Reviews for WooCommerce1

Recent Vulnerabilities

See more →
CVE-2026-120553
CVSS 6.4medium

Customer Reviews for WooCommerce <= 5.126.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slides_to_show' Shortcode Attribute

Nov 5, 2026🔧 No Patch
CVE-2026-97663
CVSS 7.2EPSS 0%high

Customer Reviews for WooCommerce <= 5.122.0 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name

Oct 2, 2026🔧 No Patch
CVE-2026-96823
CVSS 7.5EPSS 0%high

WordPress Customer Reviews for WooCommerce plugin <= 5.120.0 - Arbitrary Content Deletion vulnerability

Sep 30, 2026🔧 No Patch
CVE-2023-45101
CVSS 4.3medium

WordPress Customer Reviews for WooCommerce plugin <= 5.36.0 - Broken Access Control vulnerability

Jan 2, 2025
CVE-2024-10614
CVSS 4.3medium

Customer Reviews for WooCommerce <= 5.61.0 - Missing Authorization to Authenticated (Subscriber+) Import Cancellation

Nov 16, 2024
CVE-2024-3731
CVSS 6.1EPSS 0%medium

Customer Reviews for WooCommerce <= 5.47.0 - Reflected Cross-Site Scripting via 's'

Apr 19, 2024
CVE-2024-3243
CVSS 4.3EPSS 0%medium

Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending

Apr 16, 2024
CVE-2024-3869
CVSS 4.3EPSS 0%medium

Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Coupon Search

Apr 16, 2024
CVE-2023-51692
CVSS 4.3medium

WordPress Customer Reviews for WooCommerce Plugin <= 5.38.1 is vulnerable to Broken Access Control

Feb 28, 2024
CVE-2024-1044
CVSS 5.3medium

Customer Reviews for WooCommerce <= 5.38.10 - Improper Authorization via submit_review

Feb 20, 2024🔧 No Patch

Monitor cusrev in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.