Reviews Plus Vulnerabilities

The Reviews Plus plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_hide_revs_translation_notice() function in versions up to, and including, 1.3.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to dismiss n...

CVSS:

4.3

Affected:

up to 1.3.4

Fixed in:

1.3.5

Disclosed:

Apr 22, 2024

CVE-2024-32822 on NVD →

The Reviews Plus plugin for WordPress is vulnerable to Denial of Service in versions before 1.2.14. This is due to an unknown part of the file post/page of the component Rating Submission Handler. The manipulation with an unknown input leads to a denial of service vulnerability. This makes it possible for authenticatio...

CVSS:

6.5

Affected:

up to 1.2.14

Fixed in:

1.2.15

Disclosed:

Oct 25, 2021

CVE-2021-24894 on NVD →