CVE-2024-1849: Gowebsolutions Wp Customer Reviews

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

The WP Customer Reviews WordPress plugin before 3.7.1 does not validate a parameter allowing contributor and above users to redirect a page to a malicious URL

Affected products

• Gowebsolutions Wp Customer Reviews: before 3.7.1 (fixed in 3.7.1)

Published 2024-04-15. Last modified 2026-06-17.