Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 19:09:52 +0000 CVE-2023-2833 — ReviewX <= 1.6.13 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation https://cve.radiocsirt.org/vuln/cve-2023-2833 <p><strong>Affected:</strong> ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews &amp; Schema</p> <p>The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the &#39;rx_set_screen_options&#39; function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the &#39;wp_screen_options[option]&#39; and &#39;wp_screen_options[value]&#39; parameters during a screen option update.</p> <p><strong>Affected:</strong> ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews &amp; Schema</p> <p>The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the &#39;rx_set_screen_options&#39; function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the &#39;wp_screen_options[option]&#39; and &#39;wp_screen_options[value]&#39; parameters during a screen option update.</p> https://cve.radiocsirt.org/vuln/cve-2023-2833