CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-0080

The Customer Reviews for WooCommerce WordPress plugin before 5.16.0 does not validate one of its shortcode attribute, which could allow users with a contributor role and above to include arbitrary files via a traversal attack. This could also allow them to read non PHP files and retrieve their content. RCE could also be achieved if the attacker manage to upload a malicious image containing PHP code, and then include it via the affected attribute, on a default WP install, authors could easily achieve that given that they have the upload_file capability.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.01

EPSS Ranking 75.5%

CVSS Severity

CVSS v3 Score 8.8

References

Products affected by CVE-2023-0080

Cusrev » Customer Reviews For Woocommerce » Version: N/A

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:-
Cusrev » Customer Reviews For Woocommerce » Version: 4.0

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.0
Cusrev » Customer Reviews For Woocommerce » Version: 4.1

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.1
Cusrev » Customer Reviews For Woocommerce » Version: 4.10

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.10
Cusrev » Customer Reviews For Woocommerce » Version: 4.11

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.11
Cusrev » Customer Reviews For Woocommerce » Version: 4.12

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.12
Cusrev » Customer Reviews For Woocommerce » Version: 4.13

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.13
Cusrev » Customer Reviews For Woocommerce » Version: 4.14

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.14
Cusrev » Customer Reviews For Woocommerce » Version: 4.15

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.15
Cusrev » Customer Reviews For Woocommerce » Version: 4.16

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.16
Cusrev » Customer Reviews For Woocommerce » Version: 4.17

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.17
Cusrev » Customer Reviews For Woocommerce » Version: 4.18

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.18
Cusrev » Customer Reviews For Woocommerce » Version: 4.19

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.19
Cusrev » Customer Reviews For Woocommerce » Version: 4.2

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.2
Cusrev » Customer Reviews For Woocommerce » Version: 4.20

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.20
Cusrev » Customer Reviews For Woocommerce » Version: 4.21

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.21
Cusrev » Customer Reviews For Woocommerce » Version: 4.22

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.22
Cusrev » Customer Reviews For Woocommerce » Version: 4.23

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.23
Cusrev » Customer Reviews For Woocommerce » Version: 4.24

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.24
Cusrev » Customer Reviews For Woocommerce » Version: 4.25

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.25
Cusrev » Customer Reviews For Woocommerce » Version: 4.26

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.26
Cusrev » Customer Reviews For Woocommerce » Version: 4.27

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.27
Cusrev » Customer Reviews For Woocommerce » Version: 4.28

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.28
Cusrev » Customer Reviews For Woocommerce » Version: 4.29

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.29
Cusrev » Customer Reviews For Woocommerce » Version: 4.3

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.3
Cusrev » Customer Reviews For Woocommerce » Version: 4.30

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.30
Cusrev » Customer Reviews For Woocommerce » Version: 4.31

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.31
Cusrev » Customer Reviews For Woocommerce » Version: 4.32

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.32
Cusrev » Customer Reviews For Woocommerce » Version: 4.33

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.33
Cusrev » Customer Reviews For Woocommerce » Version: 4.34

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.34
Cusrev » Customer Reviews For Woocommerce » Version: 4.35

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.35
Cusrev » Customer Reviews For Woocommerce » Version: 4.36

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.36
Cusrev » Customer Reviews For Woocommerce » Version: 4.37

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.37
Cusrev » Customer Reviews For Woocommerce » Version: 4.38

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.38
Cusrev » Customer Reviews For Woocommerce » Version: 4.39

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.39
Cusrev » Customer Reviews For Woocommerce » Version: 4.4

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.4
Cusrev » Customer Reviews For Woocommerce » Version: 4.41

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.41
Cusrev » Customer Reviews For Woocommerce » Version: 4.42

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.42
Cusrev » Customer Reviews For Woocommerce » Version: 4.43

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.43
Cusrev » Customer Reviews For Woocommerce » Version: 4.44

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.44
Cusrev » Customer Reviews For Woocommerce » Version: 4.45

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.45
Cusrev » Customer Reviews For Woocommerce » Version: 4.46

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.46
Cusrev » Customer Reviews For Woocommerce » Version: 4.5

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.5
Cusrev » Customer Reviews For Woocommerce » Version: 4.6

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.6
Cusrev » Customer Reviews For Woocommerce » Version: 4.7

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.7
Cusrev » Customer Reviews For Woocommerce » Version: 4.8

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.8
Cusrev » Customer Reviews For Woocommerce » Version: 4.9

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:4.9
Cusrev » Customer Reviews For Woocommerce » Version: 5.0.0

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.0.0
Cusrev » Customer Reviews For Woocommerce » Version: 5.1.0

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.1.0
Cusrev » Customer Reviews For Woocommerce » Version: 5.1.1

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.1.1
Cusrev » Customer Reviews For Woocommerce » Version: 5.1.2

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.1.2
Cusrev » Customer Reviews For Woocommerce » Version: 5.10.0

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.10.0
Cusrev » Customer Reviews For Woocommerce » Version: 5.11.0

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.11.0
Cusrev » Customer Reviews For Woocommerce » Version: 5.12.0

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.12.0
Cusrev » Customer Reviews For Woocommerce » Version: 5.13.0

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.13.0
Cusrev » Customer Reviews For Woocommerce » Version: 5.13.1

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.13.1
Cusrev » Customer Reviews For Woocommerce » Version: 5.14.0

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.14.0
Cusrev » Customer Reviews For Woocommerce » Version: 5.15.0

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.15.0
Cusrev » Customer Reviews For Woocommerce » Version: 5.2.0

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.2.0
Cusrev » Customer Reviews For Woocommerce » Version: 5.2.1

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.2.1
Cusrev » Customer Reviews For Woocommerce » Version: 5.3.0

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.3.0
Cusrev » Customer Reviews For Woocommerce » Version: 5.3.1

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.3.1
Cusrev » Customer Reviews For Woocommerce » Version: 5.3.2

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.3.2
Cusrev » Customer Reviews For Woocommerce » Version: 5.3.3

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.3.3
Cusrev » Customer Reviews For Woocommerce » Version: 5.3.4

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.3.4
Cusrev » Customer Reviews For Woocommerce » Version: 5.3.5

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.3.5
Cusrev » Customer Reviews For Woocommerce » Version: 5.3.6

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.3.6
Cusrev » Customer Reviews For Woocommerce » Version: 5.3.7

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.3.7
Cusrev » Customer Reviews For Woocommerce » Version: 5.4.0

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.4.0
Cusrev » Customer Reviews For Woocommerce » Version: 5.4.1

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.4.1
Cusrev » Customer Reviews For Woocommerce » Version: 5.5.0

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.5.0
Cusrev » Customer Reviews For Woocommerce » Version: 5.5.1

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.5.1
Cusrev » Customer Reviews For Woocommerce » Version: 5.6.0

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.6.0
Cusrev » Customer Reviews For Woocommerce » Version: 5.6.1

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.6.1
Cusrev » Customer Reviews For Woocommerce » Version: 5.6.2

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.6.2
Cusrev » Customer Reviews For Woocommerce » Version: 5.6.3

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.6.3
Cusrev » Customer Reviews For Woocommerce » Version: 5.6.4

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.6.4
Cusrev » Customer Reviews For Woocommerce » Version: 5.6.5

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.6.5
Cusrev » Customer Reviews For Woocommerce » Version: 5.7.0

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.7.0
Cusrev » Customer Reviews For Woocommerce » Version: 5.8.0

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.8.0
Cusrev » Customer Reviews For Woocommerce » Version: 5.8.1

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.8.1
Cusrev » Customer Reviews For Woocommerce » Version: 5.9.0

cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:5.9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-0080

Products

Pricing

Contact Us