Builder for WooCommerce product reviews shortcodes – ReviewShort

Builder for WooCommerce product reviews shortcodes – ReviewShort has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2024; all 4 are fixed as of September 2026. Their average CVSS score is 5.5, and the most serious one scores 6.3 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting.

Every one of the 4 issues recorded for Builder for WooCommerce product reviews shortcodes – ReviewShort has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (2) reported by Dhabaleshwar Das.

Strategic Overview

Avg CVSSMedium

5.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Builder for WooCommerce product reviews shortcodes – ReviewShort vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.3CVE-2022-4974

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Read the full analysis

Vulnerability Records

4 records


2024-05-16 00:00	Builder for WooCommerce reviews shortcodes – ReviewShort <= 1.01.5 - Missing Authorization Builder for WooCommerce product… <= 1.01.5	`CVE-2024-34763`	5.3 Medium	Dhabaleshwar Das	Yes
2024-03-15 00:00	Builder for WooCommerce reviews shortcodes – ReviewShort <= 1.01.3 - Cross-Site Request Forgery Builder for WooCommerce product… <= 1.01.3	`CVE-2024-29093`	4.3 Medium	Dhabaleshwar Das	Yes
2023-07-18 00:00	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Builder for WooCommerce product… <= 1.0.20	`CVE-2023-33999`	6.1 Medium	Rafie Muhammad	Yes
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks Builder for WooCommerce product… < 1.0.17	`CVE-2022-4974`	6.3 Medium	Anonymous	Yes

Showing 1–4 of 4 reports