Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2c82-jh24-wvh5

Опубликовано: 23 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.12 via the syncedData function. This makes it possible for unauthenticated attackers to extract sensitive data including user names, emails, phone numbers, addresses.

The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.12 via the syncedData function. This makes it possible for unauthenticated attackers to extract sensitive data including user names, emails, phone numbers, addresses.

EPSS

Процентиль: 11%
0.00037
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-922

Связанные уязвимости

CVSS3: 5.3
nvd
17 дней назад

The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.12 via the syncedData function. This makes it possible for unauthenticated attackers to extract sensitive data including user names, emails, phone numbers, addresses.

EPSS

Процентиль: 11%
0.00037
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-922