WordPress Plugin Vulnerabilities

Wp Ultimate Review < 2.3.0 - Unauthenticated Review Restriction Bypass

Description

The WP Ultimate Review plugin for WordPress is vulnerable to bypass review restrictions in all versions up to, and including, 2.2.5. This is due to the plugin not properly enforcing review restrictions. This makes it possible for unauthenticated attackers to review things multiple times.

Affects Plugins

Fixed in 2.3.0

References

Classification

Type
NO AUTHORISATION
CWE

Miscellaneous

Original Researcher
Kyle Sanchez
Verified
No

Timeline

Publicly Published
2024-04-17 (about 2 years ago)
Added
2024-04-23 (about 2 years ago)
Last Updated
2024-04-23 (about 2 years ago)

Other