WP Customer Reviews

WordPress plugin · wp-customer-reviews · WordPress.org ↗

Latest v3.8.1 Last release Jun 17, 2026 Tested up to WP 7.0.5 20,000+ active installs

Critical

High

Known total

Unfixed

Running WP Customer Reviews on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
HIGH CVSS 7.2	WP Customer Reviews [wp-customer-reviews] < 3.7.6 WPVulnerability	< 3.7.6	v3.7.6	CVE-2025-14452	Feb 18, 2026
HIGH CVSS 8.8	WP Customer Reviews [wp-customer-reviews] < 3.0.9 WPVulnerability	< 3.0.9	v3.0.9	CVE-2016-10902	Apr 4, 2014
MEDIUM CVSS 6.1	WP Customer Reviews [wp-customer-reviews] < 3.8.0 WPVulnerability	< 3.8.0	v3.8.0	CVE-2026-11608	Feb 18, 2026
MEDIUM CVSS 5.4	WP Customer Reviews [wp-customer-reviews] < 3.7.1 WPVulnerability · PoC available	< 3.7.1	v3.7.1	CVE-2024-1849	Mar 25, 2024
MEDIUM CVSS 4.3	WP Customer Reviews [wp-customer-reviews] < 3.6.7 WPVulnerability	< 3.6.7	v3.6.7	CVE-2023-4686	Oct 31, 2023
MEDIUM CVSS 4.8	WP Customer Reviews [wp-customer-reviews] < 3.6.7 WPVulnerability	< 3.6.7	v3.6.7	CVE-2023-4648	Sep 13, 2023
MEDIUM CVSS 4.8	WP Customer Reviews [wp-customer-reviews] < 3.5.6 WPVulnerability	< 3.5.6	v3.5.6	CVE-2021-24296	May 4, 2021
MEDIUM CVSS 6.1	WP Customer Reviews [wp-customer-reviews] < 3.4.3 WPVulnerability	< 3.4.3	v3.4.3	CVE-2021-24135	Aug 20, 2020
MEDIUM CVSS 6.1	WP Customer Reviews [wp-customer-reviews] < 3.0.9 WPVulnerability	< 3.0.9	v3.0.9	CVE-2016-10901	Apr 4, 2016
UNKNOWN	WP Customer Reviews [wp-customer-reviews] < 3.4.3 WPVulnerability	< 3.4.3	v3.4.3	—	Aug 20, 2020
UNKNOWN	WP Customer Reviews [wp-customer-reviews] < 3.0.9 WPVulnerability	< 3.0.9	v3.0.9	—	Apr 6, 2017
UNKNOWN	WP Customer Reviews [wp-customer-reviews] < 3.0.9 WPVulnerability	< 3.0.9	v3.0.9	—	Apr 6, 2017

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.