WordPress WooCommerce Photo Reviews Plugin Content Injection Vulnerability
Vulnerability
A content injection vulnerability has been identified in the WordPress WooCommerce Photo Reviews plugin, affecting versions through 1.4.4. This vulnerability arises from improper neutralization of script-related HTML tags, allowing for basic cross-site scripting (XSS) and code injection into pages and posts.
Impact
Exploitation of this vulnerability could lead to unauthorized content injection, allowing attackers to manipulate website pages or posts. This could be used to insert phishing pages or other malicious content.
Added: Feb 26, 2026, 11:53 AM
Updated: Feb 26, 2026, 3:47 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
1.7exploitability
6.6remediation
0.0relevance
3.2threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.