← CVE Intelligence

CVE-2026-100517

WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Insecure Direct Object References (IDOR) vulnerability PUBLISHED

Description (CNA)

Unauthenticated Insecure Direct Object References (IDOR) in Photo Reviews for WooCommerce <= 1.2.30 versions.

Affected (CNA)

Vendor / productVersions
VillaTheme / Photo Reviews for WooCommerceaffected n/a through 1.2.30

CWE

CWE-639

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.