CVE-2024-29093 MEDIUM

CVE-2024-29093: WordPress Builder for WooCommerce reviews shortcodes – ReviewShort plugin <= 1.01.3 - Cross Site Request Forgery (CSRF) vulnerability

Vendor Saleswonder Team: Tobias
Product Builder for WooCommerce reviews shortcodes – ReviewShort
Weakness CWE-352 · CSRF
Published March 19, 2024
Last update May 11, 2026
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

Cross-Site Request Forgery (CSRF) vulnerability in Saleswonder Team: Tobias Builder for WooCommerce reviews shortcodes – ReviewShort woo-product-reviews-shortcode.This issue affects Builder for WooCommerce reviews shortcodes – ReviewShort: from n/a through <= 1.01.3.

Key dates

02Disclosure timeline

March 19, 2024 CVE published
May 11, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2020-36742 Custom Field Template <= 2.5.1 - Cross-Site Request Forgery Bypass CVE-2025-31588 WordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability CVE-2017-20062 Elefant CMS cross-site request forgery CVE-2024-51643 WordPress Amazon Associate Filter plugin <= 0.4 - CSRF to Stored XSS vulnerability CVE-2026-41317 Frappe Press has an unsafe HTTP method / CSRF-adjacent issue on API secret generation