Skip to content
OpenAdvisories

Vendor

ReviewX

12 known vulnerabilities.

Products

ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema 6 ReviewX 6
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-10734

    ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Sensitive Information Exposure

    The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.12 via the syncedData function. This m…

    ReviewX ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema Web / CMS
  • Medium 5.3
    CVE-2025-10731

    ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Sensitive Information Exposure to Data Export

    The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.12 via the allReminderSettings functio…

    ReviewX ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema Web / CMS
  • Medium 6.5
    CVE-2025-10736

    ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.10 - Incorrect Authorization to Unauthenticated Information Exposure and Data Manipulation

    The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to unauthorized access of data due to improper authorization checks on the userAccessibility() function in all ver…

    ReviewX ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema Web / CMS
  • Medium 4.3
    CVE-2023-40670

    WordPress ReviewX plugin <= 1.6.17 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ReviewX Team ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through 1.6.17.

    ReviewX ReviewX
  • Medium 5.3
    CVE-2024-43323

    WordPress ReviewX plugin <= 1.6.28 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ReviewX ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through 1.6.28.

    ReviewX ReviewX
  • Medium 4.3
    CVE-2024-3609

    ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.27 - Missing Authorization

    The ReviewX – Multi-criteria Rating & Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized deletion of data due to a missing capability check on the reviewx_remove_guest_image function in all versions up to, and including, 1.6.27. This m…

    ReviewX ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema Web / CMS
  • Medium 4.3
    CVE-2024-33921

    WordPress ReviewX plugin <= 1.6.21 - Broken Access Control vulnerability

    Broken Access Control vulnerability in ReviewX.This issue affects ReviewX: from n/a through 1.6.21.

    ReviewX ReviewX
  • Medium 6.5
    CVE-2024-29812

    WordPress ReviewX plugin <= 1.6.22 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ReviewX allows Stored XSS.This issue affects ReviewX: from n/a through 1.6.22.

    ReviewX ReviewX