Vulnerabilities > Wpdeveloper > Reviewx > High

DATE CVE VULNERABILITY TITLE RISK
2023-06-06 CVE-2023-2833 Improper Privilege Management vulnerability in Wpdeveloper Reviewx
The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rx_set_screen_options' function.
network
low complexity
wpdeveloper CWE-269
8.8
8.8
2023-02-23 CVE-2023-26325 SQL Injection vulnerability in Wpdeveloper Reviewx
The 'rx_export_review' action in the ReviewX WordPress Plugin version < 1.6.4, is affected by an authenticated SQL injection vulnerability in the 'filterValue' and 'selectedColumns' parameters.
network
low complexity
wpdeveloper CWE-89
8.8
8.8