Reviewx
WPDeveloper · 8 CVEs
WordPress ReviewX plugin <= 1.6.17 - Broken Access Control vulnerability
Dec 13, 2024
WordPress ReviewX plugin <= 1.6.28 - Broken Access Control vulnerability
Nov 1, 2024
ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.27 - Missing Authorization
May 16, 2024
WordPress ReviewX plugin <= 1.6.21 - Broken Access Control vulnerability
May 3, 2024
WordPress ReviewX plugin <= 1.6.22 - Cross Site Scripting (XSS) vulnerability
Mar 27, 2024
WordPress ReviewX Plugin <= 1.6.7 is vulnerable to CSV Injection
Nov 7, 2023
ReviewX <= 1.6.13 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation
Jun 6, 2023
The 'rx_export_review' action in the ReviewX WordPress Plugin, is affected by an authenticated SQL injection vulnerabil…
Feb 23, 2023
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2023-40670 | WordPress ReviewX plugin <= 1.6.17 - Broken Access Control vulnerability | MEDIUM | 0.48% | Dec 13, 2024 |
| CVE-2024-43323 | WordPress ReviewX plugin <= 1.6.28 - Broken Access Control vulnerability | CRITICAL | 0.48% | Nov 1, 2024 |
| CVE-2024-3609 | ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.27 - Missing Authorization | MEDIUM | 0.37% | May 16, 2024 |
| CVE-2024-33921 | WordPress ReviewX plugin <= 1.6.21 - Broken Access Control vulnerability | HIGH | 0.40% | May 3, 2024 |
| CVE-2024-29812 | WordPress ReviewX plugin <= 1.6.22 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 0.36% | Mar 27, 2024 |
| CVE-2022-46809 | WordPress ReviewX Plugin <= 1.6.7 is vulnerable to CSV Injection | CRITICAL | 0.79% | Nov 7, 2023 |
| CVE-2023-2833 | ReviewX <= 1.6.13 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation | HIGH | 17.48% | Jun 6, 2023 |
| CVE-2023-26325 | The 'rx_export_review' action in the ReviewX WordPress Plugin, is affected by an authenticated SQL injection vulnerability in the 'filterValue' and 'selectedCo… | HIGH | 0.87% | Feb 23, 2023 |
Showing 1 to 8 of 8 CVEs