ReviewX

Products

ProductCVEsExploitedLatest
ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema6–Mar 23, 2026
ReviewX5–Jul 2, 2026

Exploited and recent CVEs

  • CVE-2026-57359 High 7.1 WordPress ReviewX plugin <= 2.3.10 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-40781 High 7.5 WordPress ReviewX plugin <= 2.3.6 - Broken Authentication vulnerability 0.3%
  • CVE-2025-10734 Medium 5.3 ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Sensitive Information Exposure 0.2%
  • CVE-2025-10679 High 7.3 ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Limited Remote Code Execution 0.5%
  • CVE-2025-10731 Medium 5.3 ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Sensitive Information Exposure to Data Export 0.3%
  • CVE-2025-10736 Medium 6.5 ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.10 - Incorrect Authorization to Unauthenticated Information Exposure and Data Manipulation 0.2%
  • CVE-2024-43323 Medium 5.3 WordPress ReviewX plugin <= 1.6.28 - Broken Access Control vulnerability 0.5%
  • CVE-2024-3609 Medium 4.3 ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.27 - Missing Authorization 0.4%
  • CVE-2024-33921 Medium 4.3 WordPress ReviewX plugin <= 1.6.21 - Broken Access Control vulnerability 0.4%
  • CVE-2024-29812 Medium 6.5 WordPress ReviewX plugin <= 1.6.22 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2023-2833 High 8.8 ReviewX <= 1.6.13 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation 17.5%