Login Request a demo
WU
Product
Wp Ultimate Review
by roxnor · last CVE Oct 3, 2026
6
CVEs
0
On KEV
8.1
Max CVSS
2
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 2Medium 4Low 0
Severity
All severities6Critical0High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Wp Ultimate Review to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-92235
8.1
0%
Sep 22
WP Ultimate Review <= 2.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_submit_review_data[xs_reviw_summery]' Parameter
Affected: through 2.4.2
CVE-2024-21746
7.5
0%
May 17
WordPress Wp Ultimate Review plugin <= 2.3.6 - IP limit Bypass vulnerability
Affected: through 2.3.6
CVE-2026-100157
6.5
0%
Oct 3
WP Ultimate Review <= 2.4.3 - Unauthenticated Arbitrary Shortcode Execution via 'xs_reviw_summery' Parameter (Split-Shortcode / Late-Registered Shortcode)
Affected: through 2.4.3
CVE-2025-63057
6.5
0%
Dec 9
WordPress Wp Ultimate Review plugin <= 2.3.7 - Cross Site Scripting (XSS) vulnerability
Affected: through 2.3.7
CVE-2026-103519
5.4
0%
Oct 3
WP Ultimate Review <= 2.4.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_reviw_summery' Parameter
Affected: through 2.4.3
CVE-2026-39644
5.3
0%
Apr 8
WordPress Wp Ultimate Review plugin <= 2.3.8 - Broken Access Control vulnerability
Affected: through 2.3.8
Showing 6