Review Disclaimer

Review Disclaimer has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Review Disclaimer has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Muhammad Nur Ibnu Hubab. Review Disclaimer is installed on roughly 90 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.2.11.

Strategic Overview

Avg CVSSMedium
4.4/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Review Disclaimer vulnerabilities before they are exploited.

Most severe open issueCVSS 4.4CVE-2025-67628

Review Disclaimer <= 2.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Review Disclaimer banner
Latestv2.0.3

Review Disclaimer

AMP-MODE

Author

AMP-MODE

4.5(2)
90/100
Last Updated
2023-05-03 (3y ago)
Active Installs
90+
Downloads
10,286
Requires WP
3.1+
Requires PHP
0+
Tested up to
WP 6.2.11
Created
2013-12-18 (13y ago)

Clearly disclose to your visitors that you will receive compensation for your review, or endorsement of a particular company, product, or service. Recent changes to rules in the United States by the FTC, the United Kingdom by the OFT, and in other countries now require that bloggers disclose the fact that they were compensated (either monetarily or through free products) for their reviews. On blogs that post paid reviews in addition to other tips, it is not useful to add a disclosure to every post that gets written. That would add a lot of unnecessary disclosures to your site and probably confuse some of your visitors. For that reason, the shortcode provided by this plugin will allow you to easily insert a small disclosure statement only to the blog posts or pages you want it added to. You may also want to add the disclosure right before, or after the actual endorsement, or referral link in the post. You can use this shortcode to add the disclosure anywhere within the body of your posts.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C