Plugin icon

WP Ultimate Review

wp-ultimate-review

Vulnerabilities:

9

Last Updated:

May 21, 2026

Active Installs:

70000

Published
Title
Fixed in
CVSS
Published
2026-02-14
Title
Ultimate Review < 2.4.0 - Missing Authorization
Fixed in
Fixed in 2.4.0
CVSS
5.3 (medium)
Published
2025-12-07
Title
Ultimate Review < 2.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.3.8
CVSS
6.4 (medium)
Published
2024-04-17
Title
Wp Ultimate Review < 2.3.0 - Unauthenticated Review Restriction Bypass
Fixed in
Fixed in 2.3.0
CVSS
5.3 (medium)
Published
2024-04-17
Title
Wp Ultimate Review < 2.3.0 - Missing Authorization
Fixed in
Fixed in 2.3.0
CVSS
5.3 (medium)
Published
2024-04-17
Title
Wp Ultimate Review < 2.3.0 - Unauthenticated Insecure Direct Object Reference
Fixed in
Fixed in 2.3.0
CVSS
5.3 (medium)
Published
2024-01-05
Title
Wp Ultimate Review < 2.3.7 - IP Spoofing
Fixed in
Fixed in 2.3.7
CVSS
5.3 (medium)
Published
2023-10-22
Title
Wp Ultimate Review < 2.3.1 - Settings Update via CSRF
Fixed in
Fixed in 2.3.1
CVSS
4.3 (medium)
Published
2023-03-29
Title
Wp Ultimate Review < 2.1.0 - Admin+ Stored XSS
Fixed in
Fixed in 2.1.0
CVSS
3.5 (low)
Published
2023-03-29
Title
Wp Ultimate Review < 2.1.0 - Settings Update via CSRF
Fixed in
Fixed in 2.1.0
CVSS
4.3 (medium)