Reviews Plus

Reviews Plus has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2024; all 2 are fixed as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 6.5 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (50%). Other recurring categories include Uncontrolled Resource Consumption.

Every one of the 2 issues recorded for Reviews Plus has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Reviews Plus is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

5.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Reviews Plus vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5CVE-2021-24894

Reviews Plus < 1.2.14 - Denial of Service

Read the full analysis

Vulnerability Records

2 records


2024-04-22 00:00	Reviews Plus <= 1.3.4 - Missing Authorization to Notice Dismissal Reviews Plus <= 1.3.4	`CVE-2024-32822`	4.3 Medium	Dhabaleshwar Das	Yes
2021-10-25 00:00	Reviews Plus < 1.2.14 - Denial of Service Reviews Plus < 1.2.14	`CVE-2021-24894`	6.5 Medium	Drew Jones	Yes

Showing 1–2 of 2 reports

Latestv1.4.2

Reviews Plus

Author

impleCode

4.4(15)

88/100

Last Updated

2026-08-21 (23d ago)

Active Installs

1,000+

Downloads

69,812

Requires WP

3.5+

Requires PHP

7.4+

Tested up to

WP 7.1

Created

2016-10-10 (10y ago)

Reviews Plus is a free WordPress plugin that allows you to manage and display your customers reviews for products, services or any other type of content. It can be activated for any WordPress page, post or custom post type. Reviews Plus will replace the comments for selected post type. This lets you take advantage of WordPress built in functionality like reviews moderation, spam, trash with the same interface without mixing the comments and reviews. Each post type has separate reviews admin page. eCommerce Product Catalog compatible If you are also looking for a product catalog, look no more and choose eCommerce Product Catalog. It is fully compatible with Reviews Plus plugin. WooCommerce compatible Reviews Plus will replace the default WooCommerce reviews. Built with WordPress Reviews Plus is build with WordPress functions to provide maximum compatibility with other plugins. It takes advantage of WordPress comment system. Reviews Summary in SERP for organic SEO Reviews Plus rating summary is fully compatible with Google guidance in order to show up in the results. User Friendly Design Reviews Plus has fully responsive design. Display Reviews with a Shortcode You can show the reviews automatically on every page or use a shortcode: [reviews]

View on WordPress.org