CVE-2025-10736

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-10736", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-09-19T15:20:07.761Z", "datePublished": "2026-03-23T04:26:48.393Z", "dateUpdated": "2026-04-08T16:52:17.350Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:52:17.350Z"}, "affected": [{"vendor": "reviewx", "product": "ReviewX \u2013 Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.2.10", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The ReviewX \u2013 WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to unauthorized access of data due to improper authorization checks on the userAccessibility() function in all versions up to, and including, 2.2.10. This makes it possible for unauthenticated attackers to access protected REST API endpoints, extract and modify information related to users and plugin's configuration"}], "title": "ReviewX \u2013 WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.10 - Incorrect Authorization to Unauthenticated Information Exposure and Data Manipulation", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/505d7072-8fca-4b86-9b9c-3f39bc4dcfaf?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/reviewx/2.2.7/app/Rest/Middleware/AuthMiddleware.php#L41"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-285 Improper Authorization", "cweId": "CWE-285", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "abrahack"}], "timeline": [{"time": "2025-09-05T00:00:00.000Z", "lang": "en", "value": "Discovered"}, {"time": "2025-11-19T16:49:00.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2026-03-22T16:23:54.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-23T15:59:42.744976Z", "id": "CVE-2025-10736", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-23T15:59:56.033Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-10736", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-23T15:59:42.744976Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-23T15:59:49.910Z"}}], "cna": {"title": "ReviewX \u2013 WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.10 - Incorrect Authorization to Unauthenticated Information Exposure and Data Manipulation", "credits": [{"lang": "en", "type": "finder", "value": "abrahack"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"}}], "affected": [{"vendor": "reviewx", "product": "ReviewX \u2013 Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "2.2.10"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-09-05T00:00:00.000Z", "value": "Discovered"}, {"lang": "en", "time": "2025-11-19T16:49:00.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2026-03-22T16:23:54.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/505d7072-8fca-4b86-9b9c-3f39bc4dcfaf?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/reviewx/2.2.7/app/Rest/Middleware/AuthMiddleware.php#L41"}], "descriptions": [{"lang": "en", "value": "The ReviewX \u2013 WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to unauthorized access of data due to improper authorization checks on the userAccessibility() function in all versions up to, and including, 2.2.10. This makes it possible for unauthenticated attackers to access protected REST API endpoints, extract and modify information related to users and plugin's configuration"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-285", "description": "CWE-285 Improper Authorization"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:52:17.350Z"}}}, "cveMetadata": {"cveId": "CVE-2025-10736", "state": "PUBLISHED", "dateUpdated": "2026-04-08T16:52:17.350Z", "dateReserved": "2025-09-19T15:20:07.761Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2026-03-23T04:26:48.393Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "ReviewX \u2013 Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema", "vendor": "reviewx", "versions": [{"lessThanOrEqual": "2.2.10", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The ReviewX \u2013 WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to unauthorized access of data due to improper authorization checks on the userAccessibility() function in all versions up to, and including, 2.2.10. This makes it possible for unauthenticated attackers to access protected REST API endpoints, extract and modify information related to users and plugin's configuration"}, {"lang": "es", "value": "El plugin ReviewX \u2013 WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema &amp; More para WordPress es vulnerable a acceso no autorizado a datos debido a controles de autorizaci\u00f3n inadecuados en la funci\u00f3n userAccessibility() en todas las versiones hasta la 2.2.10, inclusive. Esto hace posible que atacantes no autenticados accedan a puntos finales de la API REST protegidos, extraigan y modifiquen informaci\u00f3n relacionada con los usuarios y la configuraci\u00f3n del plugin."}], "id": "CVE-2025-10736", "lastModified": "2026-06-17T08:28:51.870", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 2.5, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-10736", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-23T15:59:42.744976Z", "version": "2.0.3"}}]}, "published": "2026-03-23T05:16:04.823", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/reviewx/2.2.7/app/Rest/Middleware/AuthMiddleware.php#L41"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/505d7072-8fca-4b86-9b9c-3f39bc4dcfaf?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-285"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,2.2.10]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "ReviewX \u2013 Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema", "source": "cna", "vendor": "reviewx"}, "product": "reviewx_\u2013_multi-criteria_reviews_for_woocommerce_with_google_reviews_&_schema", "vendor": "reviewx"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": null}], "enrichment": {"confidence": 80.0, "confidence_source": "inferred", "scores": [{"score": 80.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "wordpress", "vendor": "wordpress"}], "analysis": {"en": {"generated_at": "2026-03-23T06:24:46.061856+00:00", "value": {"mitigation_remediation": ["Upgrade ReviewX plugin to a version newer than 2.2.10 to fix the authorization flaw.", "If upgrading immediately is not possible, block unauthenticated access to the plugin\u2019s REST API endpoints using a firewall rule or HTTP authentication.", "Review and audit the plugin\u2019s configuration to ensure no sensitive data is exposed via its endpoints.", "Monitor REST API logs for suspicious requests and enforce rate limiting where possible."], "summary": {"action": "Apply Patch", "impact": "Unauthorized data exposure and manipulation via REST API endpoints"}, "threat_synthesis": {"affected_systems": "Vulnerable versions of the ReviewX \u2013 Multi\u2011Criteria Reviews for WooCommerce plugin, distributed under the ReviewX vendor, up to and including 2.2.10, affect any WordPress site running these releases.", "description_and_impact": "The vulnerability lies in the ReviewX plugin's authorization checks. An unauthenticated attacker can access protected REST API endpoints, allowing extraction and modification of user data and plugin settings. This unauthorized access compromises confidentiality and integrity by exposing private information and enabling configuration changes without permission. The weakness is an improper authorization (CWE\u2011285).", "risk_and_exploitability": "The CVSS score of 6.5 indicates moderate severity, and the lack of an EPSS rating or KEV listing reduces immediate visibility of real\u2011world exploitation. Nonetheless, exploitation is straightforward: an attacker can send crafted REST API requests without authentication to retrieve or alter data. Because no user credentials are required, any person with network access to the WordPress installation can potentially exploit this flaw, making it a significant risk for sites with exposed API endpoints."}}}}, "created": "2026-03-23T09:45:36.228428+00:00", "updated": "2026-03-25T14:49:53.435542+00:00", "vendors": ["reviewx", "reviewx$PRODUCT$reviewx_\u2013_multi-criteria_reviews_for_woocommerce_with_google_reviews_&_schema", "wordpress", "wordpress$PRODUCT$wordpress"]}