WP Ultimate Review

Güvenlik açıkları

• CVE-2023-28987kimlik doğrulamasız · tıklama gerekir≤ 2.0.3

  WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2023-46085kimlik doğrulamasız · tıklama gerekir≤ 2.2.4

  WordPress Wp Ultimate Review Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2026-92235abone+≤ 2.4.2

  WP Ultimate Review <= 2.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_submit_review_data[xs_reviw_summery]' Parameter

  Yüksek 8.1

• CVE-2024-21746kimlik doğrulamasız≤ 2.3.6

  WordPress Wp Ultimate Review plugin <= 2.3.6 - IP limit Bypass vulnerability

  Yüksek 7.5

• CVE-2024-32684kimlik doğrulamasız≤ 2.2.5

  WordPress WP Ultimate Review plugin <= 2.2.5 - Broken Access Control on Review vulnerability

  Yüksek 7.5

• CVE-2024-32683kimlik doğrulamasız≤ 2.2.5

  WordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability

  Yüksek 7.5

• CVE-2026-100157kimlik doğrulamasız≤ 2.4.3

  WP Ultimate Review <= 2.4.3 - Unauthenticated Arbitrary Shortcode Execution via 'xs_reviw_summery' Parameter (Split-Shortcode / Late-Registered Shortcode)

  Orta 6.5

• CVE-2025-63057giriş gerekir≤ 2.3.7

  WordPress Wp Ultimate Review plugin <= 2.3.7 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2026-103519abone+≤ 2.4.3

  WP Ultimate Review <= 2.4.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_reviw_summery' Parameter

  Orta 5.4

• CVE-2026-39644kimlik doğrulamasız≤ 2.3.8

  WordPress Wp Ultimate Review plugin <= 2.3.8 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2024-32685kimlik doğrulamasız≤ 2.2.5

  WordPress WP Ultimate Review plugin <= 2.2.5 - Review Score Manipulation vulnerability

  Orta 5.3

• CVE-2023-28751yönetici≤ 2.0.3

  WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)

  Orta 4.8