Reviewx – Multi Criteria Reviews For Woocommerce With Google Reviews & Schema
Approved changes feed: RSS · Atom
cpe:2.3:a:reviewx:reviewx_–_multi-criteria_reviews_for_woocommerce_with_google_reviews_&_schema:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Reviewx (b826d95d-ef1c-583e-8f93-a5283f6dc363) |
|---|---|
| Product | Reviewx – Multi Criteria Reviews For Woocommerce With Google Reviews & Schema (93b8b2dd-87e8-577b-9dce-09463c8279dc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-10736 |
vulnerable | 2026-06-08 07:02:27.431164 |
ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.10 - Incorrect Authorization to Unauthenticated Information Exposure and Data Manipulation
MEDIUM (6.5)
The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to unauthorized access of data due to improper authorization checks on the userAccessibility() function in all versions up to, and including, 2.2.10. This makes it possible for unauthenticated attackers to access protected REST API endpoints, extract and modify information related to users and plugin's configuration
Published: 2026-03-23T04:26:48.393Z
Updated: 2026-04-08T16:52:17.350Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10734 |
vulnerable | 2026-06-08 07:02:27.428479 |
ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Sensitive Information Exposure
MEDIUM (5.3)
The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.12 via the syncedData function. This makes it possible for unauthenticated attackers to extract sensitive data including user names, emails, phone numbers, addresses.
Published: 2026-03-23T05:29:39.286Z
Updated: 2026-04-08T17:31:13.762Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10731 |
vulnerable | 2026-06-08 07:02:27.427635 |
ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Sensitive Information Exposure to Data Export
MEDIUM (5.3)
The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.12 via the allReminderSettings function. This makes it possible for unauthenticated attackers to obtain authentication tokens and subsequently bypass admin restrictions to access and export sensitive data including order details, names, emails, addresses, phone numbers, and user information.
Published: 2026-03-23T05:29:38.347Z
Updated: 2026-04-08T16:33:48.942Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10679 |
vulnerable | 2026-06-08 07:02:27.307073 |
ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Limited Remote Code Execution
HIGH (7.3)
The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to arbitrary method calls in all versions up to, and including, 2.2.12. This is due to insufficient input validation in the bulkTenReviews function that allows user-controlled data to be passed directly to a variable function call mechanism. This makes it possible for unauthenticated attackers to call arbitrary PHP class methods that take no inputs or have default values, potentially leading to information disclosure or remote code execution depending on available methods and server configuration.
Published: 2026-03-23T05:29:38.908Z
Updated: 2026-04-08T16:34:25.788Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3609 |
vulnerable | 2026-06-08 06:43:50.972405 |
ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.27 - Missing Authorization
MEDIUM (4.3)
The ReviewX – Multi-criteria Rating & Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized deletion of data due to a missing capability check on the reviewx_remove_guest_image function in all versions up to, and including, 1.6.27. This makes it possible for authenticated attackers, with subscriber access and above, to delete attachments.
Published: 2024-05-16T20:31:04.842Z
Updated: 2026-04-08T17:33:53.413Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2833 |
vulnerable | 2026-06-08 06:02:43.165077 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.