CPE
The Photo Reviews for WooCommerce plugin for WordPress contains a Stored DOM-Based XSS vulnerability (CVE-2026-100161) allowing unauthenticated attackers to inject malicious scripts into product reviews.