Login Request a demo
RE
Product
Reviewx
by Wpdeveloper · last CVE Dec 13, 2024
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 3Medium 3Low 0
Severity
All severities8Critical2High3Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Reviewx to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-43323
9.8
0%
Nov 1
Missing Authorization vulnerability in ReviewX ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through 1.6.28
Affected: before 1.6.29
CVE-2022-46809
9.8
1%
Nov 7
Improper Neutralization of Formula Elements in a CSV File vulnerability in WPDeveloper ReviewX – Multi-criteria Rating & Reviews for WooCommerce.This issue affects ReviewX –…
Affected: through 1.6.7
CVE-2024-33921
8.8
0%
May 3
Broken Access Control vulnerability in ReviewX.This issue affects ReviewX: from n/a through 1.6.21
Affected: before 1.6.22
CVE-2023-2833
8.8
17%
Jun 6
The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rx_set_screen_options'…
Affected: through 1.6.13
CVE-2023-26325
8.8
1%
Feb 23
The 'rx_export_review' action in the ReviewX WordPress Plugin, is affected by an authenticated SQL injection vulnerability in the 'filterValue' and 'selectedColumns' parameters
Affected: before 1.6.4
CVE-2024-29812
5.4
0%
Mar 27
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ReviewX allows Stored XSS.This issue affects ReviewX: from n/a through 1.6.22
Affected: through 1.6.22
CVE-2023-40670
4.3
0%
Dec 13
Missing Authorization vulnerability in ReviewX Team ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through…
Affected: before 1.6.18
CVE-2024-3609
4.3
0%
May 16
The ReviewX – Multi-criteria Rating & Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized deletion of data due to a missing capability check on the…
Affected: before 1.6.28
Showing 8