CVSS 3.1 Score 4.3 of 10 (medium)


Published May 16, 2024
Updated: May 17, 2024


CVE-2024-3609 is a vulnerability affecting the ReviewX - Multi-criteria Rating & Reviews for WooCommerce plugin for WordPress. The vulnerability exists in all versions up to and including 1.6.27, and it allows authenticated attackers with subscriber access or higher to delete attachments due to a missing capability check on the reviewx_remove_guest_image function. The risk score of this vulnerability is 5 out of 10, indicating a medium severity level. The base score is 4.3, suggesting that the impact can be significant. However, the privileges required are low, and there is no user interaction required. The attack vector is through the network, and the integrity and confidentiality impacts are low. It is important for organizations using this plugin to update it to a secure version as soon as possible to mitigate any potential danger posed by this vulnerability.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-3609 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options