What’s Vulnerable › Products

ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema version is affected

Latest ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema vulnerabilities

• CVE-2026-57359 — WordPress ReviewX plugin <= 2.3.10 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-40781 — WordPress ReviewX plugin <= 2.3.6 - Broken Authentication vulnerability (CVSS 7.5)
• CVE-2025-10734 — ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Sensitive Information Exposure (CVSS 5.3)
• CVE-2025-10731 — ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Sensitive Information Exposure to Data Export (CVSS 5.3)
• CVE-2025-10679 — ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Limited Remote Code Execution (CVSS 7.3)
• CVE-2025-10736 — ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.10 - Incorrect Authorization to Unauthenticated Information Exposure and Data Manipulation (CVSS 6.5)
• CVE-2023-40670 — WordPress ReviewX plugin <= 1.6.17 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2024-43323 — WordPress ReviewX plugin <= 1.6.28 - Broken Access Control vulnerability (CVSS 9.8)
• CVE-2024-3609 — ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.27 - Missing Authorization (CVSS 4.3)
• CVE-2024-33921 — WordPress ReviewX plugin <= 1.6.21 - Broken Access Control vulnerability (CVSS 8.8)
• CVE-2024-29812 — WordPress ReviewX plugin <= 1.6.22 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2022-46809 — WordPress ReviewX Plugin <= 1.6.7 is vulnerable to CSV Injection (CVSS 9.8)
• CVE-2023-2833 — ReviewX <= 1.6.13 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation (CVSS 8.8)
• CVE-2023-26325 — (CVSS 8.8)