WordPress Plugin Vulnerabilities

ReviewX < 1.6.29 - Insufficient Rating Validation

Description

The plugin is vulnerable to invalid rating due to insufficient input validation on the $rating value. This makes it possible for unauthenticated attackers to provide ratings with invalid data.

Affects Plugins

Plugin icon
reviewx
Fixed in 1.6.29

References

CVE
CVE-2024-43323
URL
https://patchstack.com/database/vulnerability/reviewx/wordpress-reviewx-plugin-1-6-28-broken-access-control-vulnerability

Miscellaneous

Original Researcher
Manab Jyoti Dowarah
Verified
No
WPVDB ID
5486606d-418e-4386-83a0-44a964340d00

Timeline

Publicly Published
2024-08-16 (about 1 year ago)
Added
2024-08-20 (about 1 year ago)
Last Updated
2024-08-20 (about 1 year ago)

Other

Published
Title
Published
2024-04-05
Title
s2Member < 240325 - Limited Privilege Escalation
Published
2023-09-25
Title
Active Directory Integration / LDAP Integration < 4.2 - Admin LDAP Passback
Published
2018-09-28
Title
Breadcrumb NavXT < 6.2.0 - Username Disclosure via REST API
Published
2014-08-01
Title
WordPress 3.6 - Post Authorship Spoofing
Published
2019-07-01
Title
Easy Forms for Mailchimp < 6.5.3 - Code Injection