Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to unauthorized access of data due to improper authorization checks on the userAccessibility() function in all versions up to, and including, 2.2.10. This makes it possible for unauthenticated attackers to access protected REST API endpoints, extract and modify information related to users and plugin's configuration
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-23 | 1 | Disclosure1 |
| 2026-03-24 | 1 | General1 |
⚡ New CVE Alert: CVE-2025-10736 📊 Severity: 6.5 🚨 Risk Level: Medium 🧩 Affects: Wordpress Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-10736 #CVE-2025-10736 #CVE #Medium #Wordpress #CyberSecurity #InfoSec https://t.co/MF6HRPs6i6
Post summary
The tweet announces CVE-2025‑10736 with a medium severity rating for Wordpress and provides a link to the NVD entry, but it lacks concrete technical details or exploit information.
CVE-2025-10736 The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to unauthorized acces… https://www.cve.org/CVERecord?id=CVE-2025-10736
Post summary
The snippet announces CVE-2025-10736, noting that the ReviewX WordPress plugin is vulnerable to unauthorized access, with a link to the official CVE record.