Medium severity5.4NVD Advisory· Published Apr 15, 2024· Updated Jun 17, 2026

CVE-2024-1849

Description

The WP Customer Reviews WordPress plugin before 3.7.1 does not validate a parameter allowing contributor and above users to redirect a page to a malicious URL

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Gowebsolutions/Wp Customer Reviews
cpe:2.3:a:gowebsolutions:wp_customer_reviews:*:*:*:*:*:wordpress:*:*
Range: <3.7.1
WordPress/Customer Reviews Woocommercecpe-rescue
Package: https://wordpress.org/plugins/customer-reviews-woocommerce
WordPress/Wp Customer Reviewsllm-fuzzy
Range: <3.7.1
Package: https://wordpress.org/plugins/wp-customer-reviews

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/e6d9fe28-def6-4f25-9967-a77f91899bfe/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000