ReviewX
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema | 6 | – | Mar 23, 2026 |
| ReviewX | 5 | – | Jul 2, 2026 |
Exploited and recent CVEs
- CVE-2026-57359 WordPress ReviewX plugin <= 2.3.10 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2026-40781 WordPress ReviewX plugin <= 2.3.6 - Broken Authentication vulnerability 0.3%
- CVE-2025-10734 ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Sensitive Information Exposure 0.2%
- CVE-2025-10679 ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Limited Remote Code Execution 0.5%
- CVE-2025-10731 ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Sensitive Information Exposure to Data Export 0.3%
- CVE-2025-10736 ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.10 - Incorrect Authorization to Unauthenticated Information Exposure and Data Manipulation 0.2%
- CVE-2024-43323 WordPress ReviewX plugin <= 1.6.28 - Broken Access Control vulnerability 0.5%
- CVE-2024-3609 ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.27 - Missing Authorization 0.4%
- CVE-2024-33921 WordPress ReviewX plugin <= 1.6.21 - Broken Access Control vulnerability 0.4%
- CVE-2024-29812 WordPress ReviewX plugin <= 1.6.22 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2023-2833 ReviewX <= 1.6.13 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation 17.5%