CVE-2023-26325

The CVE-2023-26325 issue affects the ReviewX WordPress Plugin. Concrete details: vulnerable action rx_export_review and an authenticated SQL injection in the filterValue and selectedColumns parameters. Affected software: ReviewX WordPress Plugin versions prior to 1.6.4 (per Patchstack and PT Secu...

ReviewX < 1.6.4 - Subscriber+ SQLi

The plugin does not properly sanitise and escape the filterValue and selectedColumns parameters before using them in SQL statements via the rxexportreview AJAX action available to any authenticated users, leading to a SQL injection exploitable by users with a role as low as subscriber PoC Run the...

ReviewX < 1.6.4 - Subscriber+ SQLi

The plugin does not properly sanitise and escape the filterValue and selectedColumns parameters before using them in SQL statements via the rxexportreview AJAX action available to any authenticated users, leading to a SQL injection exploitable by users with a role as low as subscriber Run the bel...

ReviewX < 1.2.9 - Unauthorised AJAX call via CSRF

Some of the plugin AJAX actions did not properly check for CRSF nonce, allowing attacker to make users call them and perform unwanted actions...