Vulnerabilities in bompus
4 resultsCVE-2023-4686MEDIUMWP Customer Reviews <= 3.6.6 - Authenticated (Subscriber+) Sensitive Information ExposureEPSS 0.6%CVE-2026-11608MEDIUMWP Customer Reviews <= 3.7.8 - Reflected Cross-Site Scripting via 'wpcr3_fname' ParameterEPSS 0.5%CVE-2023-4648MEDIUMWP Customer Reviews <= 3.6.6 - Authenticated (Administrator+) Stored Cross-Site ScriptingEPSS 0.4%CVE-2025-14452HIGHWP Customer Reviews <= 3.7.5 - Reflected Cross-Site Scripting via 'wpcr3_fname' ParameterEPSS 0.3%