ReviewX WooCommerce Plugin Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure has been identified in the ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress. This issue affects all versions through 2.2.12 and arises from the allReminderSettings function. The vulnerability allows unauthenticated attackers to access authentication tokens, bypass admin restrictions, and export sensitive data such as order details, names, emails, addresses, phone numbers, and user information.

Impact

Exploitation of this vulnerability could lead to unauthorized access and export of sensitive user and order information.

Remediation

Users are advised to update the ReviewX WooCommerce plugin to version 2.3.0 or a newer patched version.