Skip to content
OpenAdvisories

Vendor

ReviewX

12 known vulnerabilities.

Products

ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema 6 ReviewX 6
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2026-57359

    WordPress ReviewX plugin <= 2.3.10 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in ReviewX <= 2.3.10 versions.

    ReviewX ReviewX
  • High 7.5
    CVE-2026-40781

    WordPress ReviewX plugin <= 2.3.6 - Broken Authentication vulnerability

    Unauthenticated Broken Authentication in ReviewX <= 2.3.6 versions.

    ReviewX ReviewX
  • High 7.3
    CVE-2025-10679

    ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Limited Remote Code Execution

    The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to arbitrary method calls in all versions up to, and including, 2.2.12. This is due to insufficient input validati…

    ReviewX ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema Web / CMS
  • High 8.8
    CVE-2023-2833 Public exploit EPSS 17%

    ReviewX <= 1.6.13 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation

    The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rx_set_screen_options' function. This makes it possible for authenticated attackers, with minimal permissio…

    ReviewX ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema Web / CMS