CVE-2023-26325

2023-02-2300:00:00

tenable

www.cve.org

reviewx wordpress plugin

authenticated sql injection

AI Score

9.2

Confidence

High

EPSS

0.001

Percentile

33.0%

JSON

The ‘rx_export_review’ action in the ReviewX WordPress Plugin, is affected by an authenticated SQL injection vulnerability in the ‘filterValue’ and ‘selectedColumns’ parameters.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "ReviewX WordPress Plugin",
    "versions": [
      {
        "version": "All versions prior to version 1.6.4",
        "status": "affected"
      }
    ]
  }
]

References

www.tenable.com/security/research/tra-2023-2