Live › vulnerability › CVE-2026-111404
Go to dashboardA race condition in the VillaTheme Photo Reviews for WooCommerce plugin lets concurrent requests interfere with shared resources. The sources do not say what an attacker gets beyond that.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 18:31 UTC. All times on this page are UTC.
Sites running the VillaTheme Photo Reviews for WooCommerce plugin at version 1.2.31 or earlier are affected. The sources do not describe the exact data path or configuration that makes a site exposed.
No product ranges from the sources yet.
wp plugin get woo-photo-reviews --field=version1.2.31Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in VillaTheme Photo Reviews for WooCommerce woo-photo-reviews allows Leveraging Race Conditions.This issue affects Photo Reviews for WooCommerce: from n/a through 1.2.31.
This page as .md · .json · in your agent: get_signal("CVE-2026-111404")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.