Reviewx CVE-2022-46809

MEDIUM

Improper Neutralization of Formula Elements in a CSV File (CWE-1236)

2023-11-07 audit@patchstack.com

WordPress Information Disclosure Reviewx Wordpress Plugin Wpdeveloper

6.1

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

6.1 MEDIUM

AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

1

CVE Published

Nov 07, 2023 - 17:15 cve.org

MEDIUM 6.1

DescriptionCVE.org

A vulnerability in ReviewX ReviewX reviewx.This issue affects ReviewX: from n/a through <= 1.6.7.

AnalysisAI

A vulnerability in ReviewX ReviewX reviewx.6.7. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-1236. Affected products include: Wpdeveloper Reviewx.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Reviewx

View all

CVE-2023-2833 HIGH Act Now POC

The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to i

CVE-2023-26325 HIGH This Week POC

The 'rx_export_review' action in the ReviewX WordPress Plugin, is affected by an authenticated SQL injection vulnerabili

CVE-2024-43323 CRITICAL Act Now

Missing Authorization vulnerability in ReviewX ReviewX allows Exploiting Incorrectly Configured Access Control Security

CVE-2026-40781 HIGH This Week

Authentication bypass in the ReviewX WordPress plugin versions 2.3.6 and earlier allows remote unauthenticated attackers

CVE-2025-10679 HIGH This Week

The ReviewX plugin for WordPress contains a critical arbitrary method call vulnerability in all versions up to and inclu

CVE-2026-57359 HIGH This Week

Reflected/stored Cross-Site Scripting in the ReviewX WordPress plugin (versions 2.3.10 and earlier) allows unauthenticat

CVE-2024-29812 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ReviewX allows Sto

CVE-2025-10736 MEDIUM This Month

The ReviewX plugin for WordPress contains an improper authorization vulnerability in the userAccessibility() function th

CVE-2025-10731 MEDIUM This Month

The ReviewX WordPress plugin for WooCommerce contains an unauthenticated sensitive information exposure vulnerability in

CVE-2025-10734 MEDIUM This Month

The ReviewX - WooCommerce Product Reviews plugin for WordPress contains a Sensitive Information Exposure vulnerability i

CVE-2024-3609 MEDIUM This Month

The ReviewX - Multi-criteria Rating & Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized deletio

CVE-2023-40670 MEDIUM This Month

Missing Authorization vulnerability in ReviewX ReviewX reviewx allows Exploiting Incorrectly Configured Access Control S

Same weakness CWE-1236 – Improper Neutralization of Formula Elements in a CSV File

View all

CVE-2019-14749 HIGH POC

CVE-2020-36962 CRITICAL POC

CVE-2023-46401 CRITICAL POC

CVE-2025-56267 CRITICAL POC

CVE-2021-47901 CRITICAL POC

CVE-2020-36941 CRITICAL POC

CVE-2022-3574 CRITICAL POC

CVE-2022-3463 CRITICAL POC

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

CVE-2021-34523 CRITICAL POC

CVE-2013-2251 CRITICAL POC

CVE-2017-5638 CRITICAL POC

CVE-2025-24813 CRITICAL POC

CVE-2015-1701 HIGH POC

CVE-2017-0147 HIGH POC

CVE-2014-6324 HIGH POC

Share

CVE-2022-46809 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy