Reviews Sorted

Reviews Sorted has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Reviews Sorted has a vendor fix available, so running the current release closes it.

All of these findings were reported by Gilang - DJ. Reviews Sorted is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.7.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Reviews Sorted vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-13969

Reviews Sorted <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'space' Shortcode Attribute

Read the full analysis

Vulnerability Records

1 records
Reviews Sorted banner
Latestv4.0.3

Reviews Sorted

Eurisko

Author

Eurisko

0.0(0)
0/100
Last Updated
2026-08-19 (2mo ago)
Active Installs
10+
Downloads
3,423
Requires WP
5.6+
Requires PHP
7.4+
Tested up to
WP 7.0.7
Created
2022-07-11 (4y ago)

Thank you for installing the Review Management Plugin by Reviews Sorted. Once you install the plugin you’ll be able to send customers to your new reviews page /submit-a-review. To display your review testimonials and score sliders on your site, you can paste the following shortcodes: Review Form – [reviews-form] Review Testimonials Only Option 1 – Using Stars: [reviews-testimonials layout=1] Option 2 – Using Symbols: [reviews-testimonials layout=2] Option 3 – Plain Style [reviews-testimonials layout=3] Reviews Average Only Option 1 – Using Stars: [reviews-average layout=1] Option 2 – Using Symbols: [reviews-average layout=2] Option 3 – Plain Style [reviews-average layout=3] Reviews Testimonial & Average Combined Slider Option 1 – Using Stars: [reviews-slider layout=1] Option 2 – Using Symbols: [reviews-slider layout=2] Option 3 – Plain Style [reviews-slider layout=3] If you have any questions, please email support@reviewssorted.com. External Services This plugin connects to an external API at https://sys.reviewssorted.com/ for license validation. Data sent: – Site URL (if applicable) – License key No personal user data is transmitted. Service provider: Reviews Sorted Privacy policy: https://reviewssorted.com/privacy-policy

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C