CyberRota Analysis
AI-GeneratedThe Customer Reviews for WooCommerce plugin for WordPress versions prior to 5.113.0 is vulnerable due to a lack of authentication and capability checks on its media upload AJAX action, allowing unauthenticated users to upload media files to the Media Library. This can result in media library pollution and potential disk space exhaustion, posing a risk to site performance and integrity. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate these risks.
Original NVD Description
The Customer Reviews for WooCommerce WordPress plugin before 5.113.0 does not perform authentication, capability, or nonce checks on one of its media upload AJAX actions when the review media attachment feature is enabled, allowing unauthenticated users to upload media files (bounded to an image and video allowlist) to the Media Library and create attachment posts, leading to media library pollution and disk space exhaustion.