Medium severity5.3NVD Advisory· Published Feb 29, 2024· Updated Apr 8, 2026
CVE-2024-1044
CVE-2024-1044
Description
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'submit_review' function in all versions up to, and including, 5.38.12. This makes it possible for unauthenticated attackers to submit reviews with arbitrary email addresses regardless of whether reviews are globally enabled.
Affected products
2- cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:*:*:*:*:*:wordpress:*:*Range: <5.39.0
- Range: <=5.38.12
Patches
Vulnerability mechanics
References
2- www.wordfence.com/threat-intel/vulnerabilities/id/4420c334-1ea4-4549-b391-150702abc2f8nvdThird Party Advisory
- plugins.trac.wordpress.org/changesetnvdProduct
News mentions
0No linked articles in our index yet.