Wp Ultimate Review (Unknown) - vulnerabilities (CVEs)

5 CVEs, 5 in the last 30 days, 1 known versions, newest CVE from 2026-10-22. Vendor: Unknown.

CVEs of Wp Ultimate Review

• CVE-2026-103234 - CVSS 4.8 (medium), 2026-10-22: The WP Ultimate Review WordPress plugin before 2.4.5 does not neutralise shortcodes in all of the review fields submitted through its public review form,…
• CVE-2026-101159 - CVSS 7.5 (high), 2026-10-03: The WP Ultimate Review WordPress plugin before 2.4.4 does not properly sanitise and escape reviews submitted through its public review form, which is…
• CVE-2026-101162 - CVSS 6.4 (medium), 2026-10-03: The WP Ultimate Review WordPress plugin before 2.4.4 does not escape some of its review overview settings before outputting them in posts, which could allow…
• CVE-2026-101161 - CVSS 7.5 (high), 2026-10-03: The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent unauthenticated users from storing crafted review content that makes the reviewed page…
• CVE-2026-101160 - CVSS 7.5 (high), 2026-10-03: The WP Ultimate Review WordPress plugin before 2.4.4 does not validate that a submitted review rating is numeric before storing it and later using it in…