The Customer Reviews for WooCommerce WordPress plugin before 5
The Customer Reviews for WooCommerce WordPress plugin before 5.113.0 does not perform authentication, capability, or nonce checks on one of its media upload AJAX actions when the review media attachment feature is enabled, allowing unauthenticated users to upload media files (bounded to an image and video allowlist) to the Media Library and create attachment posts, leading to media library pollution and disk space exhaustion.
CVSS Score
6.5
MEDIUM
Published
16 Jul 2026 07:16
Modified
16 Jul 2026 19:16
Source
CIRCL
CVSS v3 Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Attack Vector
Network
Complexity
Low
Privileges
None
Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
Low
Weaknesses (CWE)
CWE-434
Affected Systems
No vendor data available.
External Links
KEV Status
Not in CISA KEV catalog