CVE-2026-111404lowCWE-362

CVE-2026-111404: falha de baixa gravidade em VillaTheme Photo Reviews for WooCommerce

WordPress Photo Reviews for WooCommerce plugin <= 1.2.31 - Race Condition vulnerability

Publicada em

Seguir esta CVE+ Monitorar Photo Reviews for WooCommerce

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.7epss 0.2%
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in VillaTheme Photo Reviews for WooCommerce woo-photo-reviews allows Leveraging Race Conditions.This issue affects Photo Reviews for WooCommerce: from n/a through 1.2.31.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
VillaTheme · Photo Reviews for WooCommerce
CVEs relacionadas — VillaTheme Photo Reviews for WooCommerce

No mesmo produto, das mais perigosas para as menos.

CVE-2026-100517HIGHWordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-100515HIGHWordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%