PT-2026-27045

Name of the Vulnerable Software and Affected Versions ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress versions through 2.2.10 Description The ReviewX plugin for WordPress is susceptible to unauthorized data access...

EUVD-2024-32188

Malicious code in bioql PyPI...

EUVD-2023-30146

Malicious code in bioql PyPI...

CVE-2024-3609

The ReviewX – Multi-criteria Rating & Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized deletion of data due to a missing capability check on the reviewxremoveguestimage function in all versions up to, and including, 1.6.27. This makes it possible for authenticated...

CVE-2023-40670 WordPress ReviewX plugin <= 1.6.17 - Broken Access Control vulnerability

Missing Authorization vulnerability in ReviewX ReviewX reviewx allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through = 1.6.17...

CVE-2024-43323 WordPress ReviewX plugin <= 1.6.28 - Broken Access Control vulnerability

Missing Authorization vulnerability in ReviewX ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through 1.6.28...

WordPress ReviewX Plugin <= 1.6.28 is vulnerable to Broken Access Control

Software ReviewX Type Plugin Vulnerable versions = 1.6.28 Fixed in 1.6.29 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-43323 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID aac7e9823c91 Credits Manab Jyoti Dowarah Required...

CVE-2024-3609

The ReviewX – Multi-criteria Rating & Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized deletion of data due to a missing capability check on the reviewxremoveguestimage function in all versions up to, and including, 1.6.27. This makes it possible for authenticated...

WordPress ReviewX – Multi-criteria Rating & Reviews for WooCommerce plugin <= 1.6.27 - Missing Authorization vulnerability

Missing Authorization vulnerability discovered by Lucio Sá in WordPress Plugin ReviewX versions = 1.6.27...

PT-2024-26890 · WordPress · Reviewx

Name of the Vulnerable Software and Affected Versions: The ReviewX – Multi-criteria Rating & Reviews for WooCommerce plugin for WordPress versions prior to 1.6.28 Description: The issue allows authenticated attackers with subscriber access and above to delete attachments due to a missing capabili...

WordPress ReviewX Plugin <= 1.6.27 is vulnerable to Broken Access Control

Software ReviewX Type Plugin Vulnerable versions = 1.6.27 Fixed in 1.6.28 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-3609 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ba8ab4855491 Credits Lucio Sá Required privilege Subscrib...

WordPress ReviewX Plugin <= 1.6.21 is vulnerable to Broken Access Control

Software ReviewX Type Plugin Vulnerable versions = 1.6.21 Fixed in 1.6.22 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-33921 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 2fee9e63af0c Credits Abdi Pranata Required privile...

ReviewX Plugin for WordPress < 1.6.3 SQL Injection

The WordPress ReviewX Cache Plugin installed on the remote host is affected by an authenticated SQL Injection via rxexportreview action. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

WordPress ReviewX Plugin <= 1.6.22 is vulnerable to Cross Site Scripting (XSS)

Software ReviewX Type Plugin Vulnerable versions = 1.6.22 Fixed in 1.6.23 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29812 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 79b6a46011c1 Credits LVT-tholv2k Required privilege Contributor...

CVE-2022-46809 WordPress ReviewX Plugin <= 1.6.7 is vulnerable to CSV Injection

Improper Neutralization of Formula Elements in a CSV File vulnerability in WPDeveloper ReviewX – Multi-criteria Rating & Reviews for WooCommerce.This issue affects ReviewX – Multi-criteria Rating & Reviews for WooCommerce: from n/a through 1.6.7...

CVE-2022-46809 WordPress ReviewX Plugin <= 1.6.7 is vulnerable to CSV Injection

Improper Neutralization of Formula Elements in a CSV File vulnerability in WPDeveloper ReviewX – Multi-criteria Rating & Reviews for WooCommerce.This issue affects ReviewX – Multi-criteria Rating & Reviews for WooCommerce: from n/a through 1.6.7...

CVE-2023-2833

The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rxsetscreenoptions' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their...

CVE-2023-2833 ReviewX <= 1.6.13 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation

The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rxsetscreenoptions' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their...

WordPress plugin ReviewX 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress ReviewX Plugin <= 1.6.13 is vulnerable to Privilege Escalation

Software ReviewX Type Plugin Vulnerable versions = 1.6.13 Fixed in 1.6.14 OWASP Top 10 A6: Security Misconfiguration Classification Privilege Escalation CVE CVE-2023-2833 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 0ccf8a6d79e5 Credits Lana Codes Required privilege...