WordPress ReviewX Plugin <= 1.6.21 is vulnerable to Broken Access Control

Software ReviewX Type Plugin Vulnerable versions = 1.6.21 Fixed in 1.6.22 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-33921 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 2fee9e63af0c Credits Abdi Pranata Required privile...

ReviewX Plugin for WordPress < 1.6.3 SQL Injection

The WordPress ReviewX Cache Plugin installed on the remote host is affected by an authenticated SQL Injection via rxexportreview action. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

ReviewX < 1.6.23 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The ReviewX plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.6.22 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject...

CVE-2024-29812

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ReviewX allows Stored XSS.This issue affects ReviewX: from n/a through 1.6.22...

CVE-2024-29812

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ReviewX allows Stored XSS.This issue affects ReviewX: from n/a through 1.6.22...

CVE-2024-29812

Technical details about CVE-2024-29812 are not publicly provided in the connected documents. The initial description notes a stored XSS in ReviewX up to version 1.6.22, but no concrete technical specifics (vendor, exact component, root cause, impact, or fix) are included here. Monitor for updates.

CVE-2024-29812 WordPress ReviewX plugin <= 1.6.22 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ReviewX allows Stored XSS.This issue affects ReviewX: from n/a through 1.6.22...

CVE-2024-29812 WordPress ReviewX plugin <= 1.6.22 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ReviewX allows Stored XSS.This issue affects ReviewX: from n/a through 1.6.22...

PT-2024-23058 · Reviewx · Reviewx

Name of the Vulnerable Software and Affected Versions: ReviewX versions 1.6.22 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject maliciou...

WordPress Plugin ReviewX 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

WordPress ReviewX Plugin <= 1.6.22 is vulnerable to Cross Site Scripting (XSS)

Software ReviewX Type Plugin Vulnerable versions = 1.6.22 Fixed in 1.6.23 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29812 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 79b6a46011c1 Credits LVT-tholv2k Required privilege Contributor...

CVE-2022-46809

Improper Neutralization of Formula Elements in a CSV File vulnerability in WPDeveloper ReviewX – Multi-criteria Rating & Reviews for WooCommerce.This issue affects ReviewX – Multi-criteria Rating & Reviews for WooCommerce: from n/a through 1.6.7...

CVE-2022-46809

Improper Neutralization of Formula Elements in a CSV File vulnerability in WPDeveloper ReviewX – Multi-criteria Rating & Reviews for WooCommerce.This issue affects ReviewX – Multi-criteria Rating & Reviews for WooCommerce: from n/a through 1.6.7...

Input validation

Improper Neutralization of Formula Elements in a CSV File vulnerability in WPDeveloper ReviewX – Multi-criteria Rating & Reviews for WooCommerce.This issue affects ReviewX – Multi-criteria Rating & Reviews for WooCommerce: from n/a through 1.6.7...

CVE-2022-46809 WordPress ReviewX Plugin <= 1.6.7 is vulnerable to CSV Injection

Improper Neutralization of Formula Elements in a CSV File vulnerability in WPDeveloper ReviewX – Multi-criteria Rating & Reviews for WooCommerce.This issue affects ReviewX – Multi-criteria Rating & Reviews for WooCommerce: from n/a through 1.6.7...

CVE-2022-46809 WordPress ReviewX Plugin <= 1.6.7 is vulnerable to CSV Injection

Improper Neutralization of Formula Elements in a CSV File vulnerability in WPDeveloper ReviewX – Multi-criteria Rating & Reviews for WooCommerce.This issue affects ReviewX – Multi-criteria Rating & Reviews for WooCommerce: from n/a through 1.6.7...

CVE-2022-46809

CVE-2022-46809 affects WordPress ReviewX – Multi-criteria Rating & Reviews for WooCommerce (WPDeveloper). The vulnerable component is ReviewX CSV export functionality (CSV injection) in ReviewX

WordPress Plugin ReviewX Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin ReviewX - Multi-criteria...

WordPress ReviewX Plugin < 1.6.9 SQLi Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpdeveloper:reviewx"; ifdescription...

WordPress ReviewX Plugin <= 1.6.17 is vulnerable to Broken Access Control

Software ReviewX Type Plugin Vulnerable versions = 1.6.17 Fixed in 1.6.18 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-40670 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 539b406909c1 Credits Abdi Pranata Required privilege...