Vulnerabilities > Wpdeveloper > Reviewx

DATE CVE VULNERABILITY TITLE RISK
2023-11-07 CVE-2022-46809 Improper Neutralization of Formula Elements in a CSV File vulnerability in Wpdeveloper Reviewx
Improper Neutralization of Formula Elements in a CSV File vulnerability in WPDeveloper ReviewX – Multi-criteria Rating & Reviews for WooCommerce.This issue affects ReviewX – Multi-criteria Rating & Reviews for WooCommerce: from n/a through 1.6.7.
network
low complexity
wpdeveloper CWE-1236
critical
9.8
2023-06-06 CVE-2023-2833 Improper Privilege Management vulnerability in Wpdeveloper Reviewx
The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rx_set_screen_options' function.
network
low complexity
wpdeveloper CWE-269
8.8
2023-02-23 CVE-2023-26325 SQL Injection vulnerability in Wpdeveloper Reviewx
The 'rx_export_review' action in the ReviewX WordPress Plugin version < 1.6.4, is affected by an authenticated SQL injection vulnerability in the 'filterValue' and 'selectedColumns' parameters.
network
low complexity
wpdeveloper CWE-89
8.8