CVE-2026-40781: WordPress ReviewX plugin <= 2.3.6 - Broken Authentication vulnerability

Synopsis

An authentication bypass vulnerability affects the ReviewX WordPress plugin at version 2.3.6 and earlier. The flaw is reachable over the network without any credentials, meaning an unauthenticated remote attacker can exploit it directly. Successful exploitation allows the attacker to perform high-impact write operations, tampering with data or functionality protected by authentication. No fix has been published yet; HarborGuard tracks the advisory and will surface a patched-image rebuild as soon as an upstream fix is available.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerability is exposed over the network; an attacker must be able to reach the WordPress instance running the ReviewX plugin via HTTP/HTTPS.

• AuthenticationNot required

  No credentials of any kind are needed; the attacker can exploit this as a completely anonymous, unauthenticated request.

• Victim interactionNot required

  No user action or social engineering is required; the attacker sends requests directly to the target service.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and does not depend on race conditions, specific memory layouts, or other variable environmental factors.

Blast Radius

• The attacker bypasses authentication controls and can perform actions or access endpoints that are intended to be restricted to logged-in users.
• Integrity of stored data is at high risk; the attacker can create, modify, or delete reviews and plugin-managed records without authorization.
• Confidentiality and availability are not directly impacted according to the CVSS vector, but unauthorized write access can be used to insert malicious content into published review data.