Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-07-02
ReviewX - Cross-Site Scripting (XSS) (CVE-2026-57359)
Unauthenticated Cross Site Scripting (XSS) in ReviewX
PLUGIN
ReviewX
CVE-2026-57359
Risk Score
Threat Entry
Updated 2026-06-17
Reviewx - Security Vulnerability (CVE-2026-40781)
Unauthenticated Broken Authentication in ReviewX
PLUGIN
Reviewx
CVE-2026-40781
Risk Score
Threat Entry
Updated 2026-06-17
Reviewx - Information Disclosure (CVE-2025-10734)
The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.12 via the syncedData function. This makes it possible for unauthenticated attackers to extract sensitive data including user names, emails, phone numbers, addresses.
PLUGIN
Reviewx
CVE-2025-10734
Risk Score
Threat Entry
Updated 2026-06-17
Reviewx - Information Disclosure (CVE-2025-10731)
The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.12 via the allReminderSettings function. This makes it possible for unauthenticated attackers to obtain authentication tokens and subsequently bypass admin restrictions to access and export sensitive data including order details, names, emails, addresses, phone numbers, and user information.
PLUGIN
Reviewx
CVE-2025-10731
Risk Score
Threat Entry
Updated 2026-06-17
Reviewx - Remote Code Execution (CVE-2025-10679)
The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to arbitrary method calls in all versions up to, and including, 2.2.12. This is due to insufficient input validation in the bulkTenReviews function that allows user-controlled data to be passed directly to a variable function call mechanism. This makes it possible for unauthenticated attackers to call arbitrary PHP class methods that take no inputs or have default values, potentially leading to information disclosure or remote code execution depending on available…
PLUGIN
Reviewx
CVE-2025-10679
Risk Score
Threat Entry
Updated 2026-06-17
Reviewx - Security Vulnerability (CVE-2025-10736)
The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to unauthorized access of data due to improper authorization checks on the userAccessibility() function in all versions up to, and including, 2.2.10. This makes it possible for unauthenticated attackers to access protected REST API endpoints, extract and modify information related to users and plugin's configuration
PLUGIN
Reviewx
CVE-2025-10736
Risk Score
Threat Entry
Updated 2026-06-17
Reviewx - Broken Access Control (CVE-2023-40670)
Missing Authorization vulnerability in ReviewX Team ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through 1.6.17.
PLUGIN
Reviewx
CVE-2023-40670
Risk Score
Threat Entry
Updated 2026-06-17
Reviewx - Broken Access Control (CVE-2024-43323)
Missing Authorization vulnerability in ReviewX ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through 1.6.28.
PLUGIN
Reviewx
CVE-2024-43323
Risk Score
Threat Entry
Updated 2026-06-17
Reviewx - Broken Access Control (CVE-2024-3609)
The ReviewX – Multi-criteria Rating & Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized deletion of data due to a missing capability check on the reviewx_remove_guest_image function in all versions up to, and including, 1.6.27. This makes it possible for authenticated attackers, with subscriber access and above, to delete attachments.
PLUGIN
Reviewx
CVE-2024-3609
Risk Score
Threat Entry
Updated 2026-06-17
Reviewx - Broken Access Control (CVE-2024-33921)
Broken Access Control vulnerability in ReviewX.This issue affects ReviewX: from n/a through 1.6.21.
PLUGIN
Reviewx
CVE-2024-33921
Risk Score
Threat Entry
Updated 2026-06-17
Reviewx - Cross-Site Scripting (XSS) (CVE-2024-29812)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ReviewX allows Stored XSS.This issue affects ReviewX: from n/a through 1.6.22.
PLUGIN
Reviewx
CVE-2024-29812
Risk Score
Threat Entry
Updated 2026-06-17
Reviewx - Security Vulnerability (CVE-2022-46809)
Improper Neutralization of Formula Elements in a CSV File vulnerability in WPDeveloper ReviewX – Multi-criteria Rating & Reviews for WooCommerce.This issue affects ReviewX – Multi-criteria Rating & Reviews for WooCommerce: from n/a through 1.6.7.
PLUGIN
Reviewx
CVE-2022-46809
Risk Score
Threat Entry
Updated 2026-06-17
Reviewx - Privilege Escalation (CVE-2023-2833)
The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rx_set_screen_options' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'wp_screen_options[option]' and 'wp_screen_options[value]' parameters during a screen option update.
PLUGIN
Reviewx
CVE-2023-2833
Risk Score
Threat Entry
Updated 2026-06-17
Reviewx - SQL Injection (CVE-2023-26325)
The 'rx_export_review' action in the ReviewX WordPress Plugin, is affected by an authenticated SQL injection vulnerability in the 'filterValue' and 'selectedColumns' parameters.
PLUGIN
Reviewx
CVE-2023-26325
Risk Score