Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.12 via the syncedData function. This makes it possible for unauthenticated attackers to extract sensitive data including user names, emails, phone numbers, addresses.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-23 | 2 | Disclosure2 |
| 2026-03-24 | 1 | Disclosure1 |
⚡ New CVE Alert: CVE-2025-10734 📊 Severity: 5.3 🚨 Risk Level: Medium 🧩 Affects: Wordpress Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-10734 #CVE-2025-10734 #CVE #Medium #Wordpress #CyberSecurity #InfoSec https://t.co/XXiUKk91L0
Post summary
The post announces a new CVE (CVE‑2025‑10734) for WordPress, noting its medium severity, but provides no technical details, PoC, or exploitation information.
CVE-2025-10734 Unauthenticated Sensitive Information Disclosure in ReviewX WordPress Plugin https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-10734
Post summary
The text announces CVE-2025-10734 as an unauthenticated sensitive information disclosure affecting the ReviewX WordPress plugin, linking to a vulnerability details page.
CVE-2025-10734 The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to Sensitive Informat… https://www.cve.org/CVERecord?id=CVE-2025-10734
Post summary
A brief disclosure that CVE‑2025‑10734 impacts the ReviewX WooCommerce plugin; no further exploit or patch details are present.