CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in CusRev Customer Reviews for WooCommerce customer-reviews-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Customer Reviews for WooCommerce: from n/a through <= 5.36.0.
Explanation of Vulnerability in Simple Terms
Customer Reviews for WooCommerce versions up to 5.36.0 lack proper authorization checks, allowing authenticated users to degrade site availability. An attacker with a low-privilege account can trigger a denial-of-service condition without user interaction. The vulnerability affects the plugin's core functionality and requires a site update to resolve.
What an attacker can do
An authenticated user can make the site unavailable or unresponsive to other visitors.
Potential impact on your site
Your site may become slow or unavailable if an authenticated user exploits this flaw repeatedly.
Conditions required to exploit
Attacker must have a low-privilege account (e.g., subscriber or customer role) on the WooCommerce site.
Key dates
External resources
Related vulnerabilities
