Reviewx vulnerabilities
11 vulnerabilities
Known vulnerabilities in Reviewx products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Reviewx – Multi Criteria Reviews For Woocommerce With Google Reviews & Schema6 vulnerabilities
- Reviewx5 vulnerabilities
CVE-2025-10734reviewxreviewx – multi-criteria reviews for woocommerce with google reviews & schema+1
EPSS score0.22%
The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.12 via the syncedData function. This makes it possible for unauthenticated attackers to extract sensitive data including user names, emails, phone numbers, addresses.CVE-2025-10679reviewxreviewx – multi-criteria reviews for woocommerce with google reviews & schema+1EPSS score0.46%
The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to arbitrary method calls in all versions up to, and including, 2.2.12. This is due to insufficient input validation in the bulkTenReviews function that allows user-controlled data to be passed directly to a variable function call mechanism. This makes it possible for unauthenticated attackers to call arbitrary PHP class methods that take no inputs or have default values, potentially leading to information disclosure or remote code execution depending on available methods and server configuration.CVE-2025-10731reviewxreviewx – multi-criteria reviews for woocommerce with google reviews & schema+1EPSS score0.32%
The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.12 via the allReminderSettings function. This makes it possible for unauthenticated attackers to obtain authentication tokens and subsequently bypass admin restrictions to access and export sensitive data including order details, names, emails, addresses, phone numbers, and user information.CVE-2025-10736reviewxreviewx – multi-criteria reviews for woocommerce with google reviews & schema+1EPSS score0.18%
The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to unauthorized access of data due to improper authorization checks on the userAccessibility() function in all versions up to, and including, 2.2.10. This makes it possible for unauthenticated attackers to access protected REST API endpoints, extract and modify information related to users and plugin's configurationCVE-2024-43323reviewxreviewx+2EPSS score0.48%
Missing Authorization vulnerability in ReviewX ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through 1.6.28.CVE-2024-29812reviewxreviewx+2EPSS score0.36%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ReviewX allows Stored XSS.This issue affects ReviewX: from n/a through 1.6.22.CVE-2024-3609reviewxreviewx – multi-criteria reviews for woocommerce with google reviews & schema+2EPSS score0.37%
The ReviewX – Multi-criteria Rating & Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized deletion of data due to a missing capability check on the reviewx_remove_guest_image function in all versions up to, and including, 1.6.27. This makes it possible for authenticated attackers, with subscriber access and above, to delete attachments.CVE-2024-33921reviewxreviewx+2EPSS score0.40%
Broken Access Control vulnerability in ReviewX.This issue affects ReviewX: from n/a through 1.6.21.CVE-2026-40781reviewxreviewx+1EPSS score0.43%
Unauthenticated Broken Authentication in ReviewX <= 2.3.6 versions.CVE-2026-57359reviewxreviewx+1EPSS score0.25%
Unauthenticated Cross Site Scripting (XSS) in ReviewX <= 2.3.10 versions.CVE-2023-2833reviewxreviewx – multi-criteria reviews for woocommerce with google reviews & schema+2EPSS score17.48%
The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rx_set_screen_options' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'wp_screen_options[option]' and 'wp_screen_options[value]' parameters during a screen option update.