CVE-2025-14070 in Reviewify Plugin
Sumário
de MITRE • 07/01/2026
The Reviewify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'send_test_email' AJAX action in all versions up to, and including, 1.0.6. This makes it possible for authenticated attackers, with Contributor-level access and above, to create arbitrary WooCommerce discount coupons, potentially causing financial loss to the store.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.