CVE-2026-100517

Unauthenticated Insecure Direct Object References (IDOR) in Photo Reviews for WooCommerce <= 1.2.30 versions.

Score

CVSS 3.1 7.5 High

Status

Deferred - audit@patchstack.com

Published

2026-10-01

Last modified

2026-10-01

Weaknesses

CWE-639

Affected products

• Photo Reviews For Woocommerce (Villatheme)

References

• https://patchstack.com/database/wordpress/plugin/woo-photo-reviews/vulnerability/wordpress-photo-reviews-for-woocommerc…