WU
Product
Wp Ultimate Review
6
CVEs
0
On KEV
8.1
Max CVSS
2
New 30D
Severity mix
Critical 0High 2Medium 4Low 0
Watch
Add Wp Ultimate Review to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-92235 | 8.1 | Sep 22 | WP Ultimate Review <= 2.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_submit_review_data[xs_reviw_summery]' Parameter Affected: through 2.4.2 |
| CVE-2024-21746 | 7.5 | May 17 | WordPress Wp Ultimate Review plugin <= 2.3.6 - IP limit Bypass vulnerability Affected: through 2.3.6 |
Showing 2