Sensitive Information Exposure in ReviewX Plugin for WooCommerce by WordPress

CVE-2025-10731

What is CVE-2025-10731?

The ReviewX plugin for WooCommerce is susceptible to a flaw that allows unauthenticated attackers to access sensitive information. Exploiting the vulnerability via the allReminderSettings function, attackers can retrieve authentication tokens, effectively bypassing administrative controls. This breach could lead to unauthorized access to critical data, including customer order details, personal information such as names and contact details, and other sensitive user data. It is essential for site administrators to review and update to the latest version to mitigate these risks.

References