WooCommerce Photo Reviews vulnerabilities

2 known vulnerabilities in WooCommerce Photo Reviews from VillaTheme. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  WooCommerce Photo Reviews: Improper Neutralization of Input During Web Page Generation

  CVE-2025-47570Sep 9, 2025VillaTheme

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in villatheme WooCommerce Photo Reviews woocommerce-photo-reviews.This issue affects WooCommerce Photo Reviews: from n/a through <= 1.3.13.

• 9.8 Critical severity

  WooCommerce Photo Reviews Premium: Missing Authentication for Critical Functionality

  CVE-2024-8277Sep 11, 2024VillaThemeEPSS 1.63%

  The WooCommerce Photo Reviews Premium plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.3.13.2. This is due to the plugin not properly validating what user transient is being used in the login() function and no