Lucene search

CVE-2024-3609 ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.27 - Missing Authorization

🗓️ 16 May 2024 20:04:31Reported by WordfenceType

ReviewX plugin for WordPress <= 1.6.27 missing capability check vulnerabilit

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
WPVulnDB	ReviewX – Multi-criteria Rating & Reviews for WooCommerce < 1.6.28 - Missing Authorization	16 May 202400:00	–	wpvulndb
Vulnrichment	CVE-2024-3609 ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.27 - Missing Authorization	16 May 202420:31	–	vulnrichment
Patchstack	WordPress ReviewX Plugin <= 1.6.27 is vulnerable to Broken Access Control	16 May 202400:00	–	patchstack
CVE	CVE-2024-3609	16 May 202421:16	–	cve
NVD	CVE-2024-3609	16 May 202421:16	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (May 13, 2024 to May 19, 2024)	23 May 202415:00	–	wordfence

[
  {
    "vendor": "reviewx",
    "product": "ReviewX – Multi-criteria Rating & Reviews for WooCommerce",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.6.27",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/f8152adf-1ca9-4a19-b539-39e257ab94c8
plugins	www.plugins.trac.wordpress.org/changeset

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 May 2024 20:31Current

4.7Medium risk

Vulners AI Score4.7

CVSS34.3

EPSS0.00107