CyberSecBulletin

A3rev vulnerabilities

We track 2 vulnerabilities in A3rev products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 1, 2025.

2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score

Latest A3rev vulnerabilities

  • 8.1 High severity

    Page View Count: Missing Authorization

    CVE-2025-2816A3rev

    The Page View Count plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the yellow_message_dontshow() function in versions 2.8.0 to 2.8.4. This makes it possible for

  • 8.1 High severity

    Compare Products for WooCommerce: Deserialization of Untrusted Data

    CVE-2024-12313A3rev

    The Compare Products for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.1 via deserialization of untrusted input from the 'woo_compare_list' cookie. This makes it possible for unauthenticated at