Known vulnerabilities in the ReviewX plugin
14 security advisories have been published for the ReviewX plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- ReviewX - Cross-Site Scripting (XSS) (CVE-2026-57359) HIGH
- Reviewx - Security Vulnerability (CVE-2026-40781) HIGH
- Reviewx - Information Disclosure (CVE-2025-10734) MEDIUM
- Reviewx - Information Disclosure (CVE-2025-10731) MEDIUM
- Reviewx - Remote Code Execution (CVE-2025-10679) HIGH
- Reviewx - Security Vulnerability (CVE-2025-10736) MEDIUM
- Reviewx - Broken Access Control (CVE-2023-40670) MEDIUM
- Reviewx - Broken Access Control (CVE-2024-43323) MEDIUM
- Reviewx - Broken Access Control (CVE-2024-3609) MEDIUM
- Reviewx - Broken Access Control (CVE-2024-33921) MEDIUM
- Reviewx - Cross-Site Scripting (XSS) (CVE-2024-29812) MEDIUM
- Reviewx - Security Vulnerability (CVE-2022-46809) MEDIUM
- Reviewx - Privilege Escalation (CVE-2023-2833) HIGH
- Reviewx - SQL Injection (CVE-2023-26325) HIGH