impleCode reviews plus vulnerabilities

Latest impleCode reviews plus CVEs

Newest publication first

1. CVE-2024-32822 WordPress Reviews Plus plugin <= 1.3.4 - Broken Access Control vulnerability

   Published 2024-04-26

   Medium·CVSS 4.3 EPSS 0.34%

   Missing Authorization vulnerability in impleCode Reviews Plus.This issue affects Reviews Plus: from n/a through 1.3.4.

2. CVE-2021-24894 Reviews Plus < 1.2.14 - Subscriber+ Reviews DoS

   Published 2021-11-23

   Medium·CVSS 6.5 EPSS 1.5%

   The Reviews Plus WordPress plugin before 1.2.14 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service in the review section when an authenticated user submit such rating and the reviews are set to be displayed on the post/page

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.