CVE-2023-26325: Wpdeveloper Reviewx

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

The 'rx_export_review' action in the ReviewX WordPress Plugin, is affected by an authenticated SQL injection vulnerability in the 'filterValue' and 'selectedColumns' parameters.

Affected products

• Wpdeveloper Reviewx: before 1.6.4 (fixed in 1.6.4)

Published 2023-02-23. Last modified 2026-06-17.