WP Ultimate Review vulnerabilities
We track 3 vulnerabilities in WP Ultimate Review products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 3, 2026.
Latest WP Ultimate Review vulnerabilities
- 7.5 High severity
WP Ultimate Review: Uncontrolled Resource Consumption
The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent unauthenticated users from storing crafted review content that makes the reviewed page fail with a fatal error on every subsequent visit, resulting in a persistent denial of service when the
- 7.5 High severity
WP Ultimate Review: Uncontrolled Resource Consumption
The WP Ultimate Review WordPress plugin before 2.4.4 does not validate that a submitted review rating is numeric before storing it and later using it in numeric operations when rendering reviews, allowing unauthenticated users to make the reviewed content fail
- 7.5 High severity
WP Ultimate Review: Improper Neutralization of Input During Web Page Generation
The WP Ultimate Review WordPress plugin before 2.4.4 does not properly sanitise and escape reviews submitted through its public review form, which is available to unauthenticated visitors, allowing them to perform Stored Cross-Site Scripting attacks against an