https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T16:33:50.489308+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-3243 CVE-2024-3243 — Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sendi… 2026-10-05T16:33:50.490713+00:00

Affected: ivole Customer Reviews for WooCommerce, ivole customer_reviews_for_woocommerce

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the send_test_email() function in all versions up to, and including, 5.46.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to send arbitrary test emails.