What the vulnerability does
01Description
The WooCommerce Photo Reviews Premium plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.3.13.2. This is due to the plugin not properly validating what user transient is being used in the login() function and not properly verifying the user's identity. This makes it possible for unauthenticated attackers to log in as user that has dismissed an admin notice in the past 30 days, which is often an administrator. Alternatively, a user can log in as any user with any transient that has a valid user_id as the value, though it would be more difficult to exploit this successfully.
Explanation of Vulnerability in Simple Terms
02Summary
WooCommerce Photo Reviews Premium versions up to 1.3.13.2 contain an authentication bypass vulnerability that allows unauthenticated attackers to execute arbitrary code on the site. The vulnerability requires no user interaction and can be exploited remotely over the network. All sites running affected versions are at immediate risk of complete compromise.
What an attacker can do
03Attacker Capabilities
Run arbitrary code on the site without logging in.
Potential impact on your site
04Site Impact
Complete site compromise: attackers can steal data, modify content, install malware, or take the site offline.
Conditions required to exploit
05Prerequisites
Network access to the site; no authentication or user interaction required.
Key dates
06Disclosure timeline
September 11, 2024
CVE published
April 8, 2026
Record updated
