What is the CVSS score of CVE-2025-10736?

CVE-2025-10736 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N. EPSS exploitation probability: 0.0%.

How to fix or mitigate CVE-2025-10736?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Reviewx Multi Criteria Reviews For Woocommerce With Google Reviews Schema CVE-2025-10736

Q: Which versions of Reviewx Multi Criteria Reviews For Woocommerce With Google Reviews Schema are affected by CVE-2025-10736?

Organizations using More should be aware of notable risk from CVE-2025-10736 rated CVSS 6.5. Exploitation could compromise the security of affected deployments.

EUVD-2025-208922 MEDIUM

Improper Authorization (CWE-285)

2026-03-23 Wordfence

GHSA-vw68-5xq3-6845

WordPress Authentication Bypass Google Reviewx Multi Criteria Reviews For Woocommerce With Google Reviews Schema Reviewx Wordpress Plugin

6.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 23, 2026 - 05:15 euvd

EUVD-2025-208922

Analysis Generated

Mar 23, 2026 - 05:15 vuln.today

CVE Published

Mar 23, 2026 - 04:26 nvd

MEDIUM 6.5

DescriptionCVE.org

The ReviewX - WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to unauthorized access of data due to improper authorization checks on the userAccessibility() function in all versions up to, and including, 2.2.10. This makes it possible for unauthenticated attackers to access protected REST API endpoints, extract and modify information related to users and plugin's configuration

AnalysisAI

The ReviewX plugin for WordPress contains an improper authorization vulnerability in the userAccessibility() function that allows unauthenticated attackers to bypass authentication checks and access protected REST API endpoints. Affected versions through 2.2.10 permit unauthorized extraction and modification of user data and plugin configuration, posing a direct threat to WooCommerce installations relying on this review management solution. With a CVSS score of 6.5 and network-based attack vector requiring no user interaction or privileges, this vulnerability presents a moderate-to-significant risk for any WordPress site using the affected plugin.

Technical ContextAI

The vulnerability exists in the REST API authentication middleware layer of the ReviewX plugin (confirmed via source code reference at plugins.trac.wordpress.org/browser/reviewx/2.2.7/app/Rest/Middleware/AuthMiddleware.php). The root cause is classified as CWE-285 (Improper Authorization), where the userAccessibility() function fails to properly enforce authentication before granting access to sensitive endpoints. This allows unauthenticated HTTP requests to interact with APIs that should require valid WordPress user authentication tokens or session validation. The affected product per CPE (cpe:2.3:a:reviewx:reviewx_–_multi-criteria_reviews_for_woocommerce_with_google_reviews_&_schema) is the ReviewX plugin marketed for WooCommerce environments, which integrates review management, Google Reviews aggregation, and schema markup functionality.

RemediationAI

WordPress site administrators should immediately upgrade the ReviewX plugin to version 2.2.11 or later once available from the WordPress plugin repository. Until a patched version is released or deployed, implement network-level mitigations by restricting direct access to /wp-json/reviewx/* endpoints via Web Application Firewall (WAF) rules or reverse proxy configuration, allowing requests only from authenticated user agents with valid WordPress session cookies. Additionally, audit recent REST API access logs for suspicious unauthenticated requests to review and configuration endpoints to detect potential exploitation. Review the Wordfence advisory (https://www.wordfence.com/threat-intel/vulnerabilities/id/505d7072-8fca-4b86-9b9c-3f39bc4dcfaf?source=cve) for vendor guidance and any released patches. Consider temporarily disabling the plugin on high-value WooCommerce stores until a fix is confirmed.