CVE-2022-40194

Unauthenticated Sensitive Information Disclosure vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress

Score

CVSS 3.1 7.5 High

Status

Modified - audit@patchstack.com

Published

2022-09-23

Last modified

2026-04-28

Weaknesses

CWE-200

Affected products

• Customer Reviews For Woocommerce (Cusrev)
• Customer Reviews For Woocommerce Wordpress Plugin (Cusrev)

References

• https://patchstack.com/database/vulnerability/customer-reviews-woocommerce/wordpress-customer-reviews-for-woocommerce-p…
• https://wordpress.org/plugins/customer-reviews-woocommerce/#developers