Reviews Sorted
Reviews Sorted has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Reviews Sorted has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Gilang - DJ. Reviews Sorted is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-13969Reviews Sorted <= 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'space' Shortcode Attribute
Read the full analysisVulnerability Records

Reviews Sorted
Author
Eurisko
Thank you for installing the Review Management Plugin by Reviews Sorted. Once you install the plugin you’ll be able to send customers to your new reviews page /submit-a-review. To display your review testimonials and score sliders on your site, you can paste the following shortcodes: Review Form – [reviews-form] Review Testimonials Only Option 1 – Using Stars: [reviews-testimonials layout=1] Option 2 – Using Symbols: [reviews-testimonials layout=2] Option 3 – Plain Style [reviews-testimonials layout=3] Reviews Average Only Option 1 – Using Stars: [reviews-average layout=1] Option 2 – Using Symbols: [reviews-average layout=2] Option 3 – Plain Style [reviews-average layout=3] Reviews Testimonial & Average Combined Slider Option 1 – Using Stars: [reviews-slider layout=1] Option 2 – Using Symbols: [reviews-slider layout=2] Option 3 – Plain Style [reviews-slider layout=3] If you have any questions, please email support@reviewssorted.com. External Services This plugin connects to an external API at https://sys.reviewssorted.com/ for license validation. Data sent: – Site URL (if applicable) – License key No personal user data is transmitted. Service provider: Reviews Sorted Privacy policy: https://reviewssorted.com/privacy-policy
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C