ReviewX vulnerabilities
We track 3 vulnerabilities in ReviewX products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 23, 2026.
Latest ReviewX vulnerabilities
- 7.3 High severity
ReviewX – Multi-Criteria Reviews for…: Improper Control of Generation of Code
The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to arbitrary method calls in all versions up to, and including, 2.2.12. This is due to insufficient input validatio
- 9.8 Critical severity
ReviewX: Missing Authorization
Missing Authorization vulnerability in ReviewX ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through 1.6.28.
- 8.8 High severity
ReviewX – Multi-Criteria Reviews for…: Improper Privilege Management
The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rx_set_screen_options' function. This makes it possible for authenticated attackers, with minimal permission