Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Wp Ultimate Review — Vulnerabilities & Security Advisories 16

All 16 CVE vulnerabilities found in Wp Ultimate Review, with AI-generated Chinese analysis, references, and POCs.

This page documents security weaknesses associated with the Wp Ultimate Review plugin developed by the vendor WP Ultimate Review. It serves as a centralized repository for analyzing vulnerabilities within this specific WordPress extension, focusing on technical details and exposure metrics rather than promotional content. The content aggregates various vulnerability types, including cross-site scripting, unauthorized access flaws, and configuration errors, covering incidents reported and tracked over the last several years. This range ensures that users can view both historical legacy issues and more recent security patches. By consulting this resource, users can track the vendor’s security advisories and release notes to understand how quickly threats are mitigated. Additionally, visitors can gain a deeper understanding of common weakness classes prevalent in WordPress plugins by examining the specific technical manifestations within Wp Ultimate Review. The page also allows users to look up the product’s vulnerability history, providing a clear timeline of when issues were identified, patched, or exploited. This historical context helps administrators assess the reliability of the software and make informed decisions about their own security posture. Whether you are a developer auditing code or a site administrator managing compliance, this aggregation offers a structured view of the security landscape surrounding this tool without relying on subjective evaluations or marketing language.

Vendor: Wpmet

CVE ID Title CVSS Severity Published
CVE-2026-100157 WP Ultimate Review <= 2.4.3 - Unauthenticated Arbitrary Shortcode Execution via 'xs_reviw_summery' Parameter (Split-Shortcode / Late-Registered Shortcode) CWE-94 6.5 Medium 2026-10-03
CVE-2026-103519 WP Ultimate Review <= 2.4.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_reviw_summery' Parameter CWE-94 5.4 Medium 2026-10-03
CVE-2026-101162 WP Ultimate Review < 2.4.4 - Author+ Stored XSS via Review Overview Settings - - 2026-10-03
CVE-2026-101161 WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Unset Display Settings in wp-reviews Shortcode - - 2026-10-03
CVE-2026-101160 WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Non-Numeric Review Rating - - 2026-10-03
CVE-2026-101159 WP Ultimate Review < 2.4.4 - Unauthenticated Stored XSS via Review Submission - - 2026-10-03
CVE-2026-92235 WP Ultimate Review <= 2.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_submit_review_data[xs_reviw_summery]' Parameter CWE-94 8.1 High 2026-09-22
CVE-2026-39644 WordPress Wp Ultimate Review plugin <= 2.3.8 - Broken Access Control vulnerability CWE-862 5.3 Medium 2026-04-08
CVE-2025-63057 WordPress Wp Ultimate Review plugin <= 2.3.7 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2025-12-09
CVE-2024-32685 WordPress WP Ultimate Review plugin <= 2.2.5 - Review Score Manipulation vulnerability CWE-602 5.3 Medium 2024-05-17
CVE-2024-21746 WordPress Wp Ultimate Review plugin <= 2.3.6 - IP limit Bypass vulnerability CWE-290 5.3 Medium 2024-05-17
CVE-2024-32684 WordPress WP Ultimate Review plugin <= 2.2.5 - Broken Access Control on Review vulnerability CWE-862 5.3 Medium 2024-04-22
CVE-2024-32683 WordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability CWE-639 5.3 Medium 2024-04-19
CVE-2023-28987 WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 4.3 Medium 2023-11-12
CVE-2023-46085 WordPress Wp Ultimate Review Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 4.3 Medium 2023-10-22
CVE-2023-28751 WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS) CWE-79 5.9 Medium 2023-06-23

All 16 known CVE vulnerabilities affecting Wp Ultimate Review with full Chinese analysis, references, and POCs where available.