Description
Improper Neutralization of Formula Elements in a CSV File vulnerability in WPDeveloper ReviewX – Multi-criteria Rating & Reviews for WooCommerce.This issue affects ReviewX – Multi-criteria Rating & Reviews for WooCommerce: from n/a through 1.6.7.
References (2)
Core 2
Core References
Vdb Entry vdb-entry
https://patchstack.com/database/Wordpress/Plugin/reviewx/vulnerability/wordpress-reviewx-plugin-1-6-6-csv-injection?_s_id=cve
Third Party Advisory vdb-entry
https://patchstack.com/database/vulnerability/reviewx/wordpress-reviewx-plugin-1-6-6-csv-injection?_s_id=cve
Scores
CVSS v3
6.1
EPSS
0.0079
EPSS Percentile
51.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-1236
Status
published
Products (3)
ReviewX/ReviewX
< 1.6.7
wpdeveloper/reviewx
< 1.6.7
WPDeveloper/ReviewX – Multi-criteria Rating & Reviews for WooCommerce
< 1.6.7
Published
Nov 07, 2023
Tracked Since
Feb 18, 2026