Advisories · Technology

ReviewX.

Every CVE that names ReviewX among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-57359 CVE record

CVSS 7.1 High

WordPress ReviewX plugin <= 2.3.10 - Cross Site Scripting (XSS) vulnerability
- ReviewX
- Cross-site scripting (XSS)
Not analysed yet 2 Jul 2026
CVE-2026-40781 CVE record

CVSS 7.5 High

WordPress ReviewX plugin <= 2.3.6 - Broken Authentication vulnerability
- ReviewX
- Authentication bypass
Not analysed yet 15 Jun 2026
CVE-2023-40670 CVE record

CVSS 4.3 Medium

WordPress ReviewX plugin <= 1.6.17 - Broken Access Control vulnerability
- ReviewX
- Broken access control
Not analysed yet 13 Dec 2024
CVE-2024-43323 CVE record

CVSS 5.3 Medium

WordPress ReviewX plugin <= 1.6.28 - Broken Access Control vulnerability
- ReviewX
- Broken access control
Not analysed yet 1 Nov 2024
CVE-2024-33921 CVE record

CVSS 4.3 Medium

WordPress ReviewX plugin <= 1.6.21 - Broken Access Control vulnerability
- ReviewX
- CWE-281
Not analysed yet 3 May 2024
CVE-2024-29812 CVE record

CVSS 6.5 Medium

WordPress ReviewX plugin <= 1.6.22 - Cross Site Scripting (XSS) vulnerability
- ReviewX
- Cross-site scripting (XSS)
Not analysed yet 27 Mar 2024