WP Ultimate Review vulnerabilities

2 known vulnerabilities in WP Ultimate Review from Roxnor. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  WP Ultimate Review: Improper Control of Generation of Code

  CVE-2026-92235Sep 22, 2026Roxnor

  The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.2. This is due to the software allowing users to execute an action that does not properly validate a value before running d

• 7.5 High severity

  Wp Ultimate Review: Authentication Bypass by Spoofing

  CVE-2024-21746May 17, 2024Roxnor

  Authentication Bypass by Spoofing vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows Identity Spoofing.This issue affects Wp Ultimate Review: from n/a through <= 2.3.6.