WordPress ReviewX plugin <= 1.6.17 - Broken Access Control vulnerability

CVE-2023-40670

Summary

The vulnerability in ReviewX arises from a missing authorization issue, allowing users to exploit incorrectly configured access control security levels. Affected versions of ReviewX may enable unauthorized access to sensitive features or data, compromising the integrity and security of the application. Users of ReviewX are advised to review their access control configurations and update to the latest version to mitigate potential threats.

References