CVE-2026-100161

CVE-2026-100161 published: The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'wcpr_image_upload_id' parameter in all versions up to, and including, 1.2.30 due to insufficient input sanitization and output escaping. T...

View full NVD advisory → ← Back to CVE watch