Vulnerabilities

TI-2026-10022 CVE-2026-11608 · GHSA-xp7f-phvw-3c2v

WP Customer Reviews <= 3.7.8 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter

LOW 28

The WP Customer Reviews plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpcr3_fname' parameter in all versions up to, and including, 3.7.8 due to insufficient input sanitization and output e…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00461 Published 2026-09-19 No fix listed CWE-79

TI-2025-13201 CVE-2025-14452 · GHSA-c783-xf2p-gqh6

WP Customer Reviews <= 3.7.5 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter

LOW 31

The WP Customer Reviews plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpcr3_fname' parameter in all versions up to, and including, 3.7.5 due to insufficient input sanitization and output e…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00296 Published 2026-02-19 No fix listed CWE-79

Vulnerabilities

Filters

WP Customer Reviews <= 3.7.8 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter

WP Customer Reviews <= 3.7.5 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter