Known vulnerabilities in Photo Reviews for WooCommerce

Photo Reviews for WooCommerce is an ultimate review plugin for WooCommerce which helps you send review reminder emails, allows customers to post revie …

5Reported vulnerabilities

8.1Highest CVSS score

1.2.31Latest version

10,000+Active installs

What to do now

Update Photo Reviews for WooCommerce to 1.2.32 or later. 5 of these have a fixed version available. Updating resolves them.

Plugin last updated: September 29, 2026 / Tested up to WordPress: 7.1.2 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2026-101923	High 8.1	0.3%	0 to 1.2.30 (inclusive)	`1.2.31`	October 3, 2026
CVE-2026-100161	High 7.2	0.3%	0 to 1.2.30 (inclusive)	`1.2.31`	October 10, 2026
CVE-2026-100515	Medium 6.1	0.2%	1.2.30 and earlier	`1.2.31`	October 3, 2026
CVE-2026-110251	Medium 5.4	0.3%	0 to 1.2.31 (inclusive)	`1.2.32`	October 31, 2026
CVE-2026-100517	Medium 5.3	0.3%	1.2.30 and earlier	`1.2.31`	October 1, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.