PT-2026-20688 · WordPress · Wiserreview Product Reviews For Woocommerce

Legion Hunter · Publicado 2026-02-19 · Atualizado 2026-02-19 · CVE-2026-25318

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions WiserReview Product Reviews for WooCommerce versions through 2.9

Description An issue exists in WiserReview Product Reviews for WooCommerce related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue involves a missing authorization check.

Recommendations Update WiserReview Product Reviews for WooCommerce to a version newer than 2.9.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2026-25318

Produtos afetados

Wiserreview Product Reviews For Woocommerce

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-25318 · Nota de Segurança
• https://patchstack.com/database/Wordpress/Plugin/wiser-review/vulnerability/wordpress-wiserreview-product-reviews-for-woocommerce-plugin-2-9-broken-access-control-vulnerability?_s_id=cve · Nota
• https://twitter.com/CVEnew/status/2024411394448273666 · Publicação no Twitter