WU
Product
Wp Ultimate Review
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 2Low 0
Watch
Add Wp Ultimate Review to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-28987 | 8.8 | Nov 12 | WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF) Affected: through 2.0.3 |
| CVE-2023-46085 | 8.8 | Oct 22 | WordPress Wp Ultimate Review Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF) Affected: through 2.2.4 |
| CVE-2024-21746 | 7.5 | May 17 | WordPress Wp Ultimate Review plugin <= 2.3.6 - IP limit Bypass vulnerability Affected: through 2.3.5 |
| CVE-2024-32684 | 7.5 | Apr 22 | WordPress WP Ultimate Review plugin <= 2.2.5 - Broken Access Control on Review vulnerability Affected: through 2.2.5 |
| CVE-2024-32683 | 7.5 | Apr 19 | WordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability Affected: through 2.2.5 |
| CVE-2024-32685 | 5.3 | May 17 | WordPress WP Ultimate Review plugin <= 2.2.5 - Review Score Manipulation vulnerability Affected: through 2.2.5 |
| CVE-2023-28751 | 4.8 | Jun 23 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions Affected: through 2.0.3 |
Showing 7
