Advisories · Technology
WP Ultimate Review.
Every CVE that names WP Ultimate Review among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.8 Medium
WP Ultimate Review < 2.4.5 - Unauthenticated Arbitrary Shortcode Execution via Reviewer Email
- WP Ultimate Review
- Code injection
- CVSS 6.4 Medium
WP Ultimate Review < 2.4.4 - Author+ Stored XSS via Review Overview Settings
- WP Ultimate Review
- Cross-site scripting (XSS)
- CVSS 7.5 High
WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Unset Display Settings in wp-reviews Shortcode
- WP Ultimate Review
- Denial of service
- CVSS 7.5 High
WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Non-Numeric Review Rating
- WP Ultimate Review
- Denial of service
- CVSS 7.5 High
WP Ultimate Review < 2.4.4 - Unauthenticated Stored XSS via Review Submission
- WP Ultimate Review
- Cross-site scripting (XSS)