Read the docs

wpdevteam

Records210All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical13CVSS 9.0–10.0
CVSS high44CVSS 7.0–8.9

Exploited now

wpdevteam records in CISA KEV

No wpdevteam vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Essential Addons For Elementor 55 records CRITICAL Embedpress 26 records MEDIUM Essential Blocks 25 records HIGH Reviewx 8 records HIGH Simple 301 Redirects 5 records MEDIUM Betterdocs 4 records MEDIUM Notificationx 4 records CRITICAL Betterlinks 3 records MEDIUM

Records

8 records in Reviewx · all components

TI-2023-11478 CVE-2023-26325 · GHSA-875j-67qg-f447

SQL injection in ReviewX WordPress Plugin

Priority HIGH 73

The 'rx_export_review' action in the ReviewX WordPress Plugin, is affected by an authenticated SQL injection vulnerability in the 'filterValue' and 'selectedColumns' parameters.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00872 Published 2023-02-23 No fix listed CWE-89
TI-2024-28975 CVE-2024-43323 · GHSA-wcjf-c77r-w723

WordPress ReviewX plugin <= 1.6.28 - Broken Access Control vulnerability

Priority MEDIUM 49

Missing Authorization vulnerability in ReviewX ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through 1.6.28.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00478 Published 2024-11-01 No fix listed CWE-862
TI-2022-23155 CVE-2022-46809 · GHSA-q6v6-32hh-pq9p

WordPress ReviewX Plugin <= 1.6.7 is vulnerable to CSV Injection

Priority MEDIUM 44

Improper Neutralization of Formula Elements in a CSV File vulnerability in WPDeveloper ReviewX – Multi-criteria Rating & Reviews for WooCommerce.This issue affects ReviewX – Multi-criteria Rating & Reviews for WooCommerc…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00794 Published 2023-11-07 No fix listed CWE-1236
TI-2024-19588 CVE-2024-29812 · GHSA-6h2j-v372-jc7f

WordPress ReviewX plugin <= 1.6.22 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ReviewX allows Stored XSS.This issue affects ReviewX: from n/a through 1.6.22.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00357 Published 2024-03-27 No fix listed CWE-79
TI-2023-21462 CVE-2023-40670 · GHSA-vvjx-vqg4-qv57

WordPress ReviewX plugin <= 1.6.17 - Broken Access Control vulnerability

Priority LOW 21

Missing Authorization vulnerability in ReviewX Team ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through 1.6.17.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00476 Published 2024-12-13 No fix listed CWE-862
TI-2024-03364 CVE-2024-3609 · GHSA-hgj6-v84f-8m8m

ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.27 - Missing Authorization

Priority LOW 20

The ReviewX – Multi-criteria Rating & Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized deletion of data due to a missing capability check on the reviewx_remove_guest_image function in all versio…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0037 Published 2024-05-16 No fix listed CWE-862
Open these records in search →