CVE-2022-2555: Yotpo Reviews For Woocommerce Project Yotpo Reviews For Woocommerce

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

The Yotpo Reviews for WooCommerce WordPress plugin through 2.0.4 lacks nonce check when updating its settings, which could allow attacker to make a logged in admin change them via a CSRF attack.

Affected products

• Yotpo Reviews For Woocommerce Project Yotpo Reviews For Woocommerce: up to and including 2.0.4

Published 2022-08-22. Last modified 2026-06-17.