Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-25344 EUVD-2026-15657GHSA-24pv-cxm8-65fp

WordPress Review Schema plugin <= 2.2.6 - Sensitive Data Exposure vulnerability

Published Mar 25, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme Review Schema review-schema allows Retrieve Embedded Sensitive Data.This issue affects Review Schema: from n/a through <= 2.2.6.

Affected products

VendorProductAffectedFixed
RadiusTheme Review Schema ≤ 2.2.6 —

References