CVE-2026-40781

Vulnerability

An unauthenticated broken authentication vulnerability exists in the ReviewX plugin for WordPress versions 2.3.6 and earlier [1]. The flaw allows an attacker to perform actions that should normally require higher privileges without proper authentication checks [1].

Exploitation

An attacker with network access to the WordPress site can exploit this vulnerability without needing any authentication or user interaction [1]. The exact sequence of steps is not publicly detailed, but the vulnerability is considered highly dangerous and is expected to be used in mass-exploit campaigns targeting thousands of websites simultaneously [1].

Impact

Successful exploitation enables a malicious actor to execute actions reserved for higher-privileged users, potentially gaining administrative access to the WordPress website [1]. This could lead to full site compromise, including data disclosure, content manipulation, and further attacks [1].

Mitigation

ReviewX version 2.3.7 or later contains the fix for this vulnerability; users are urged to update immediately [1]. A mitigation rule from Patchstack is available to block attacks until the plugin is patched [1]. No workaround beyond updating or applying the virtual patch is mentioned [1].