CVE-2025-10734

Published: Mar 23, 2026 Last Modified: Mar 23, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 5,3
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: low
Integrity: none
Availability: none

Description

AI Translation Available

The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.12 via the syncedData function. This makes it possible for unauthenticated attackers to extract sensitive data including user names, emails, phone numbers, addresses.

922

Insecure Storage of Sensitive Information

Incomplete
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Integrity
Potential Impacts:
Read Application Data Read Files Or Directories Modify Application Data Modify Files Or Directories
Applicable Platforms
All platforms may be affected
View CWE Details
https://plugins.trac.wordpress.org/browser/reviewx/tags/2.2…
https://plugins.trac.wordpress.org/browser/reviewx/tags/2.2.7/app/Rest/Controll…
https://www.wordfence.com/threat-intel/vulnerabilities/id/e…
https://www.wordfence.com/threat-intel/vulnerabilities/id/eb830ad3-50ba-4dfe-be…