Authentication Bypass

Authentication BypassREST API

Authentication Bypass in Customer Reviews for WooCommerce

CVE-2026-4664: a flaw in Customer Reviews for WooCommerce lets unauthenticated attackers post fake Verified reviews via the plugin's REST API.