Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ivole — Vulnerabilities & Security Advisories 15

Browse all 15 CVE security advisories affecting ivole. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Ivole is a cybersecurity platform focused on vulnerability management and threat intelligence for enterprise environments. Historically, the platform has been associated with vulnerabilities including remote code execution, cross-site scripting, and privilege escalation issues, with 11 CVEs recorded to date. Security assessments indicate common weaknesses in authentication mechanisms and input validation processes. While no major public security incidents have been widely documented, the presence of multiple CVEs suggests ongoing challenges in secure coding practices. Organizations using Ivole should prioritize regular security updates and implement robust access controls to mitigate potential risks associated with these historical vulnerability patterns.

Top products by ivole: Customer Reviews for WooCommerce
CVE ID Title CVSS Severity Published
CVE-2026-97663 Customer Reviews for WooCommerce <= 5.122.0 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name — Customer Reviews for WooCommerce CWE-79 7.2 High 2026-10-02
CVE-2026-89055 Customer Reviews for WooCommerce <= 5.120.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'items[][media]' Parameter — Customer Reviews for WooCommerce CWE-862 9.1 Critical 2026-09-25
CVE-2026-6176 Customer Reviews for WooCommerce <= 5.106.0 - Unauthenticated Stored Cross-Site Scripting via Aggregated Review Form — Customer Reviews for WooCommerce CWE-79 7.2 High 2026-08-28
CVE-2026-13771 Customer Reviews for WooCommerce <= 5.113.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute — Customer Reviews for WooCommerce CWE-79 6.4 Medium 2026-07-09
CVE-2026-3355 Customer Reviews for WooCommerce <= 5.101.0 - Reflected Cross-Site Scripting via 'crsearch' — Customer Reviews for WooCommerce CWE-79 6.1 Medium 2026-04-16
CVE-2026-4664 Customer Reviews for WooCommerce <= 5.103.0 - Unauthenticated Authentication Bypass to Arbitrary Review Submission via 'key' Parameter — Customer Reviews for WooCommerce CWE-287 5.3 Medium 2026-04-10
CVE-2026-1316 Customer Reviews for WooCommerce <= 5.97.0 - Unauthenticated Stored Cross-Site Scripting via media[].href Parameter — Customer Reviews for WooCommerce CWE-79 7.2 High 2026-02-12
CVE-2025-14891 Customer Reviews for WooCommerce <= 5.93.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via displayName Parameter — Customer Reviews for WooCommerce CWE-79 6.4 Medium 2026-01-07
CVE-2025-5720 Customer Reviews for WooCommerce <= 5.80.2 - Unauthenticated Stored Cross-Site Scripting via `author` Parameter — Customer Reviews for WooCommerce CWE-79 6.4 Medium 2025-07-31
CVE-2024-10614 Customer Reviews for WooCommerce <= 5.61.0 - Missing Authorization to Authenticated (Subscriber+) Import Cancellation — Customer Reviews for WooCommerce CWE-862 4.3 Medium 2024-11-16
CVE-2024-3731 Customer Reviews for WooCommerce <= 5.47.0 - Reflected Cross-Site Scripting via 's' — Customer Reviews for WooCommerce CWE-79 6.1 Medium 2024-04-19
CVE-2024-3243 Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending — Customer Reviews for WooCommerce CWE-862 4.3 Medium 2024-04-16
CVE-2024-3869 Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Coupon Search — Customer Reviews for WooCommerce CWE-862 4.3 Medium 2024-04-16
CVE-2024-1044 Customer Reviews for WooCommerce <= 5.38.10 - Improper Authorization via submit_review — Customer Reviews for WooCommerce CWE-284 5.3 Medium 2024-02-20
CVE-2023-6979 Customer Reviews for WooCommerce <= 5.38.9 - Authenticated (Author+) Arbitrary File Upload — Customer Reviews for WooCommerce CWE-434 8.8 High 2024-01-11

This page lists every published CVE security advisory associated with ivole. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.