A vulnerability, which was classified as problematic, has been found in villatheme WooCommerce Photo Reviews Plugin up to 1.4.4 on WordPress. This affects an unknown function. This manipulation causes basic cross site scripting.
This vulnerability is handled as CVE-2026-28132. The attack can be initiated remotely. There is not any exploit available.