CVE-2022-38470

Cross-Site Request Forgery (CSRF) vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress.

Score

CVSS 3.1 8.8 High

Status

Modified - audit@patchstack.com

Published

2022-09-23

Last modified

2026-04-28

Weaknesses

CWE-352

Affected products

• Customer Reviews For Woocommerce (Cusrev)
• Customer Reviews For Woocommerce Wordpress Plugin (Cusrev)

References

• https://patchstack.com/database/vulnerability/customer-reviews-woocommerce/wordpress-customer-reviews-for-woocommerce-p…
• https://wordpress.org/plugins/customer-reviews-woocommerce/#developers