ivole vulnerabilities
16 published CVEs name ivole among the affected products.
- Published CVEs
- 16
- Last 12 months
- 9
- Critical
- 1
- Known exploited
- 0
Critical 1High 4Medium 11Low 0Not scored 0
CVEs per yearBy the year they were published
- 20246
- 20251
- 20269
Newest CVEs
- CVE-2026-120553
Customer Reviews for WooCommerce <= 5.126.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slides_to_show' Shortcode Attribute
ivole · Customer Reviews for WooCommerce
Medium6.4 - CVE-2026-97663
Customer Reviews for WooCommerce <= 5.122.0 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name
ivole · Customer Reviews for WooCommerce
High7.2 - CVE-2026-89055
Customer Reviews for WooCommerce <= 5.120.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'items[][media]' Parameter
ivole · Customer Reviews for WooCommerce
Critical9.1 - CVE-2026-6176
Customer Reviews for WooCommerce <= 5.106.0 - Unauthenticated Stored Cross-Site Scripting via Aggregated Review Form
ivole · Customer Reviews for WooCommerce
High7.2 - CVE-2026-13771
Customer Reviews for WooCommerce <= 5.113.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute
ivole · Customer Reviews for WooCommerce
Medium6.4 - CVE-2026-3355
Customer Reviews for WooCommerce <= 5.101.0 - Reflected Cross-Site Scripting via 'crsearch'
ivole · Customer Reviews for WooCommerce
Medium6.1 - CVE-2026-4664
Customer Reviews for WooCommerce <= 5.103.0 - Unauthenticated Authentication Bypass to Arbitrary Review Submission via 'key' Parameter
ivole · Customer Reviews for WooCommerce
Medium5.3 - CVE-2026-1316
Customer Reviews for WooCommerce <= 5.97.0 - Unauthenticated Stored Cross-Site Scripting via media[].href Parameter
ivole · Customer Reviews for WooCommerce
High7.2 - CVE-2025-14891
Customer Reviews for WooCommerce <= 5.93.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via displayName Parameter
ivole · Customer Reviews for WooCommerce
Medium6.4 - CVE-2025-5720
Customer Reviews for WooCommerce <= 5.80.2 - Unauthenticated Stored Cross-Site Scripting via `author` Parameter
ivole · Customer Reviews for WooCommerce
Medium6.4