Vulnerabilities in bompus

3 results

CVE-2023-4686MEDIUMWP Customer Reviews <= 3.6.6 - Authenticated (Subscriber+) Sensitive Information ExposureEPSS 0.5%CVE-2023-4648MEDIUMWP Customer Reviews <= 3.6.6 - Authenticated (Administrator+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-14452HIGHWP Customer Reviews <= 3.7.5 - Reflected Cross-Site Scripting via 'wpcr3_fname' ParameterEPSS 0.3%