CVE-2026-110251 | Villatheme Photo Reviews for WooCommerce Plugin up to 1.2.31 on WordPress Delete Comment Hook delete_reviews_image wcpr_image_upload_id privileges management

October 31, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Villatheme Photo Reviews for WooCommerce Plugin up to 1.2.31 on WordPress. This affects the function delete_reviews_image of the component Delete Comment Hook. The manipulation of the argument wcpr_image_upload_id results in improper privilege management.

This vulnerability is identified as CVE-2026-110251. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More