Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

ivole vulnerabilities

16 published CVEs name ivole among the affected products.

Published CVEs
16
Last 12 months
9
Critical
1
Known exploited
0

Critical 1High 4Medium 11Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20246
  2. 20251
  3. 20269

Newest CVEs

  • CVE-2026-120553

    Customer Reviews for WooCommerce <= 5.126.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slides_to_show' Shortcode Attribute

    ivole · Customer Reviews for WooCommerce

    Medium6.4
  • CVE-2026-97663

    Customer Reviews for WooCommerce <= 5.122.0 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name

    ivole · Customer Reviews for WooCommerce

    High7.2
  • CVE-2026-89055

    Customer Reviews for WooCommerce <= 5.120.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'items[][media]' Parameter

    ivole · Customer Reviews for WooCommerce

    Critical9.1
  • CVE-2026-6176

    Customer Reviews for WooCommerce <= 5.106.0 - Unauthenticated Stored Cross-Site Scripting via Aggregated Review Form

    ivole · Customer Reviews for WooCommerce

    High7.2
  • CVE-2026-13771

    Customer Reviews for WooCommerce <= 5.113.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute

    ivole · Customer Reviews for WooCommerce

    Medium6.4
  • CVE-2026-3355

    Customer Reviews for WooCommerce <= 5.101.0 - Reflected Cross-Site Scripting via 'crsearch'

    ivole · Customer Reviews for WooCommerce

    Medium6.1
  • CVE-2026-4664

    Customer Reviews for WooCommerce <= 5.103.0 - Unauthenticated Authentication Bypass to Arbitrary Review Submission via 'key' Parameter

    ivole · Customer Reviews for WooCommerce

    Medium5.3
  • CVE-2026-1316

    Customer Reviews for WooCommerce <= 5.97.0 - Unauthenticated Stored Cross-Site Scripting via media[].href Parameter

    ivole · Customer Reviews for WooCommerce

    High7.2
  • CVE-2025-14891

    Customer Reviews for WooCommerce <= 5.93.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via displayName Parameter

    ivole · Customer Reviews for WooCommerce

    Medium6.4
  • CVE-2025-5720

    Customer Reviews for WooCommerce <= 5.80.2 - Unauthenticated Stored Cross-Site Scripting via `author` Parameter

    ivole · Customer Reviews for WooCommerce

    Medium6.4