PT-2026-20688 · WordPress · Wiserreview Product Reviews For Woocommerce

Legion Hunter · Published 2026-02-19 · Updated 2026-02-19 · CVE-2026-25318

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions WiserReview Product Reviews for WooCommerce versions through 2.9

Description An issue exists in WiserReview Product Reviews for WooCommerce related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue involves a missing authorization check.

Recommendations Update WiserReview Product Reviews for WooCommerce to a version newer than 2.9.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-25318

Affected Products

Wiserreview Product Reviews For Woocommerce

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-25318 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/wiser-review/vulnerability/wordpress-wiserreview-product-reviews-for-woocommerce-plugin-2-9-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2024411394448273666 · Twitter Post