{"id":"CVE-2026-96823","published":"2026-09-30T13:17:31.917","lastModified":"2026-09-30T14:18:11.420","description":"Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce <= 5.120.0 versions.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-862"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/customer-reviews-woocommerce/vulnerability/wordpress-customer-reviews-for-woocommerce-plugin-5-120-0-arbitrary-content-deletion-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The vulnerability allows unauthenticated attackers to delete arbitrary customer reviews in WooCommerce stores, potentially leading to loss of valuable user-generated content and impacting trust in product ratings. This represents a significant availability and integrity risk to e-commerce platforms.","exploitability":"Exploitation is straightforward requiring no authentication or special preconditions, as the vulnerability exists in an unauthenticated endpoint that accepts review deletion requests.","blast_radius":"The impact could affect all WooCommerce stores running version 5.120.0 or earlier, potentially causing widespread loss of customer reviews and ratings that are critical for product trust and sales conversion.","remediation":"Upgrade to WooCommerce 5.121.0 or later to remediate this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["web","content","woocommerce","e-commerce"],"model":"garnet-coder","analyzedAt":"2026-10-17T09:05:04.649Z"}}