Yotpo Product Reviews
Yotpo Product Reviews has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of October 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Yotpo Product Reviews has a vendor fix available, so running the current release closes it.
All of these findings were reported by vgo0. Yotpo Product Reviews is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2024-9356Yotpo: Product & Photo Reviews for WooCommerce <= 1.7.9 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
Yotpo Product Reviews
Author
Yotpo
woocommerceYotpo product reviews and ratings drive sales and help you better understand your customers. Collect more trustworthy reviews, photos, and videos, with in-mail review requests and AI-powered prompts. Reach more shoppers by displaying your reviews and ratings on social media and search engines, like Google. Own all of your reviews and easily moderate them. Access detailed analytics to boost conversions. Plus, connect Yotpo Reviews with Loyalty. Collect product & site reviews on auto-pilot with email templates Display eye-catching reviews and use Smart Filters to build trust Stand out in search with Google Seller Ratings and Google Shoppable Ads Add beautiful, customizable review widgets (carousels, AI summaries, & more) Easily sync reviews to and from other platforms (TikTok, Walmart, & more)
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C