Description
Unauthenticated Broken Authentication in ReviewX <= 2.3.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ReviewX | ReviewX | ≤ 2.3.6 | — |
High · 7.5
CVE-2026-40781
EUVD-2026-36987GHSA-c83w-fg37-x4j7
WordPress ReviewX plugin <= 2.3.6 - Broken Authentication vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack