Reviewx

11 CVEs across 2 Reviewx products. Browse Reviewx vulnerabilities, severities, and proof-of-concept exploits.

Reviewx products with known CVEs

ProductCVEs
Reviewx – Multi-Criteria Reviews For Woocommerce With Google Reviews & Schema6
Reviewx5
Reviewx CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-57359High7.12026-07-02Unauthenticated Cross Site Scripting (XSS) in ReviewX <= 2.3.10 versions.
CVE-2026-40781High7.52026-06-15Unauthenticated Broken Authentication in ReviewX <= 2.3.6 versions.
CVE-2025-10734Medium5.32026-03-23The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to Sensitive I…
CVE-2025-10731Medium5.32026-03-23The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to Sensitive I…
CVE-2025-10679High7.32026-03-23The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to arbitrary m…
CVE-2025-10736Medium6.52026-03-23The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to unauthorize…
CVE-2024-43323Medium5.32024-11-01Missing Authorization vulnerability in ReviewX ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from…
CVE-2024-3609Medium4.32024-05-16The ReviewX – Multi-criteria Rating & Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized deletion of data due to a missing capability c…
CVE-2024-33921Medium4.32024-05-03Broken Access Control vulnerability in ReviewX.This issue affects ReviewX: from n/a through 1.6.21.
CVE-2024-29812Medium6.52024-03-27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ReviewX allows Stored XSS.This issue affects ReviewX: fro…
CVE-2023-2833High8.82023-06-06The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rx_set_…