high

CVE-2026-89055

Customer Reviews for WooCommerce authorization bypass - a plugin endpoint does not check the caller's capability before acting

Severity: high
Affected product: customer-reviews-woocommerce
Affected versions: customer-reviews-woocommerce ≤ 5.120.0
Fixed in: customer-reviews-woocommerce a release above 5.120.0
Detection basis: Component version range
Shipped rule: customer-reviews-woocommerce: Customer Reviews for WooCommerce authorization bypass - a plugin endpoint does not check the caller's capability before acting
Added to NewScan: 2026-09-25
Detected by: NewScan — free, self-hosted

How NewScan reports it

COMPONENT VERSION RANGE

NewScan fingerprints customer-reviews-woocommerce from its response and reports this CVE when the detected version falls inside the affected range below.

References

NVD — CVE-2026-89055 ↗
CVE Record ↗

Scan for this yourself — local, in-band scanning is free.

Get NewScan (FREE) →

Review the measured benchmark, then use the verified remediation process.