Vulnerabilities / Yotpo: Product & Photo Reviews for WooCommerce
Yotpo: Product & Photo Reviews for WooCommerce vulnerabilities
Advisories WPSec published for Yotpo Product Reviews. Other sources may list more. Its attack surface: Yotpo: Product & Photo Reviews for WooCommerce on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-12 | WPSEC-2026-0793 | Yotpo: Product & Photo Reviews for WooCommerce < 1.8.3 - Improper Certificate Validation in Yotpo API Requests | Medium 6.5 | 1.8.3 |
| 2026-10-12 | WPSEC-2026-0792 | Yotpo: Product & Photo Reviews for WooCommerce < 1.8.3 - Cross-Site Request Forgery via Sync Widget IDs, Submit Past Orders and Export Reviews Actions | Medium 4.3 | 1.8.3 |
| 2026-10-12 | WPSEC-2026-0791 | Yotpo: Product & Photo Reviews for WooCommerce < 1.8.3 - Unauthenticated Sensitive Information Exposure via Debug Log File | Low 3.7 | 1.8.3 |
License: CC BY 4.0