agentprime: roxnor-wp-ultimate-reviewEvery new CVE for roxnor-wp-ultimate-review.https://agentprime.io/CVE-2026-100157: WP Ultimate Review <= 2.4.3 - Unauthenticated Arbitrary Shortcode Execution via 'xs_reviw_summery' Parameter (Split-Shortcode / Late-Registered Shortcode)https://agentprime.io/advisories/CVE-2026-100157/https://agentprime.io/advisories/CVE-2026-100157/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 06:38:26 GMTCVECVE-2026-103519: WP Ultimate Review <= 2.4.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_reviw_summery' Parameterhttps://agentprime.io/advisories/CVE-2026-103519/https://agentprime.io/advisories/CVE-2026-103519/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 06:38:23 GMTCVECVE-2026-92235: WP Ultimate Review <= 2.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_submit_review_data[xs_reviw_summery]' Parameterhttps://agentprime.io/advisories/CVE-2026-92235/https://agentprime.io/advisories/CVE-2026-92235/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 07:41:13 GMTCVECVE-2026-39644: WordPress Wp Ultimate Review plugin <= 2.3.8 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2026-39644/https://agentprime.io/advisories/CVE-2026-39644/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 08:30:32 GMTCVECVE-2025-63057: WordPress Wp Ultimate Review plugin <= 2.3.7 - Cross Site Scripting (XSS) vulnerabilityhttps://agentprime.io/advisories/CVE-2025-63057/https://agentprime.io/advisories/CVE-2025-63057/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Dec 2025 14:52:32 GMTCVECVE-2024-21746: WordPress Wp Ultimate Review plugin <= 2.3.6 - IP limit Bypass vulnerabilityhttps://agentprime.io/advisories/CVE-2024-21746/https://agentprime.io/advisories/CVE-2024-21746/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 May 2024 08:46:01 GMTCVE