Vulnerabilities / WP Ultimate Review
WP Ultimate Review vulnerabilities
Advisories WPSec published for WP Ultimate Review. Other sources may list more. Its attack surface: WP Ultimate Review on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-19 | WPSEC-2026-1239 | WP Ultimate Review <= 2.4.4 - Unauthenticated Arbitrary Shortcode Execution via Reviewer Email Field | Medium 5.6 | 2.4.5 |
| 2026-10-01 | WPSEC-2026-0047 | WP Ultimate Review <= 2.4.3 - Unauthenticated Denial of Service via Review Rating | Medium 5.3 | 2.4.4 |
| 2026-10-01 | WPSEC-2026-0046 | WP Ultimate Review <= 2.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Author Review Criteria Ratings | Medium 6.4 | 2.4.4 |
| 2026-10-01 | WPSEC-2026-0045 | WP Ultimate Review <= 2.4.3 - Unauthenticated Arbitrary Shortcode Execution via Review Submission | High 7.3 | 2.4.4 |
License: CC BY 4.0