WordPress plugin
Reviews Plus security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
2Known vulnerabilities
- Critical0
- High0
- Medium2
- Low0
All Reviews Plus vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization to Notice Dismissal ≤1.3.4Update to 1.3.5 | CVE-2024-32822 | |
| Medium6.5 | Denial of Service <1.2.14Update to 1.2.15 | CVE-2021-24894 |
- Medium4.3Missing Authorization to Notice Dismissal
≤1.3.4Update to 1.3.5
- Medium6.5Denial of Service
<1.2.14Update to 1.2.15
Reviews Plus: common questions
Does Reviews Plus have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Reviews Plus: 2 medium. None are known to affect version null.
How do I check which version of Reviews Plus I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Reviews Plus vulnerability?
CVE-2024-32822, published Apr 22, 2024: Reviews Plus <= 1.3.4 - Missing Authorization to Notice Dismissal. Severity: Medium (CVSS 4.3).
Is any Reviews Plus vulnerability listed in CISA KEV?
No. None of the known Reviews Plus vulnerabilities is currently listed in the CISA KEV catalog.