{"id":"CVE-2023-2833","aliases":["EUVD-2023-34284","GHSA-q58r-654c-jm37"],"status":"published","title":"ReviewX \u003c= 1.6.13 - Arbitrary Usermeta Update  to Authenticated (Subscriber+) Privilege Escalation","description":"The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rx_set_screen_options' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'wp_screen_options[option]' and 'wp_screen_options[value]' parameters during a screen option update.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.1748,"percentile":0.97152,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-269"],"published":"2023-06-06T09:33:23Z","modified":"2026-06-17T05:53:34Z","exploits":[{"source":"pocgithub","id":"Alucard0x1/CVE-2023-2833","title":"Alucard0x1/CVE-2023-2833","date":"2023-06-19","url":"https://github.com/Alucard0x1/CVE-2023-2833"}],"products":[{"vendor":"reviewx","product":"reviewx – multi-criteria reviews for woocommerce with google reviews \u0026 schema"},{"vendor":"wpdeveloper","product":"reviewx"}],"references":[{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/70e1d701-2cff-4793-9e4c-5b16a4038e8d?source=cve","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://plugins.trac.wordpress.org/browser/reviewx/tags/1.6.13/includes/rx-functions.php#L972","tags":["x_transferred","Product"]},{"url":"https://plugins.trac.wordpress.org/changeset?sfp_email=\u0026sfph_mail=\u0026reponame=\u0026new=2916148%40reviewx\u0026old=2912114%40reviewx\u0026sfp_email=\u0026sfph_mail=#file472","tags":["x_transferred","Product"]},{"url":"https://lana.codes/lanavdb/a889c3ff-5df0-4d7e-951f-0b0406468efa/","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://www.wordfence.com/blog/2023/05/wpdeveloper-addresses-privilege-escalation-vulnerability-in-reviewx-wordpress-plugin/","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2833"},{"url":"https://lana.codes/lanavdb/a889c3ff-5df0-4d7e-951f-0b0406468efa"},{"url":"https://www.wordfence.com/blog/2023/05/wpdeveloper-addresses-privilege-escalation-vulnerability-in-reviewx-wordpress-plugin"},{"url":"https://github.com/advisories/GHSA-q58r-654c-jm37"}],"sources":{"cve":[{"id":"CVE-2023-2833","title":"ReviewX \u003c= 1.6.13 - Arbitrary Usermeta Update  to Authenticated (Subscriber+) Privilege Escalation","description":"The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rx_set_screen_options' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'wp_screen_options[option]' and 'wp_screen_options[value]' parameters during a screen option update.","status":"published","published":"2023-06-06T09:33:23.412Z","modified":"2026-04-08T17:00:26.446Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:35:23.645864Z"}],"euvd":[{"id":"EUVD-2023-34284","description":"The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rx_set_screen_options' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'wp_screen_options[option]' and 'wp_screen_options[value]' parameters during a screen option update.","status":"published","published":"2023-06-06T09:33:23Z","modified":"2026-04-08T17:00:26Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:24:54.279102Z"}],"ghsa":[{"id":"GHSA-q58r-654c-jm37","title":"The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and...","description":"The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rx_set_screen_options' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'wp_screen_options[option]' and 'wp_screen_options[value]' parameters during a screen option update.","status":"published","published":"2023-06-06T12:30:14Z","modified":"2024-04-04T04:35:04Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:56:24.94679Z"}],"nvd":[{"id":"CVE-2023-2833","description":"The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rx_set_screen_options' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'wp_screen_options[option]' and 'wp_screen_options[value]' parameters during a screen option update.","status":"published","published":"2023-06-06T10:15:09.953Z","modified":"2026-06-17T05:53:34.487Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:08:05.329837Z"}]}}