CVE-2025-14070

Name of the Vulnerable Software and Affected Versions Reviewify plugin for WordPress versions through 1.0.6

Description The Reviewify plugin for WordPress has a flaw that allows unauthorized modification of data. This is due to a missing capability check on the 'send test email' AJAX action. Authenticated attackers with Contributor-level access or higher can create arbitrary WooCommerce discount coupons, potentially leading to financial loss. The vulnerable component is the send test email AJAX action.

Recommendations Update the Reviewify plugin to a version newer than 1.0.6.