Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Etoile Web Design Component: Ultimate Reviews Clear all filters
TI-2024-16825 CVE-2024-25597 · GHSA-q7vp-g92j-c6ph

WordPress Ultimate Reviews plugin <= 3.2.8 - Unauthenticated Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Etoile Web Design Ultimate Reviews allows Stored XSS.This issue affects Ultimate Reviews: from n/a through 3.2.8.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00375 Published 2024-03-15 No fix listed CWE-79
TI-2020-18897 CVE-2020-36726 · GHSA-p7jf-6m2v-3ffq

Ultimate Reviews < 2.1.33 - PHP Object Injection

Priority MEDIUM 52

The Ultimate Reviews plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.1.32 via deserialization of untrusted input in several vulnerable functions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01553 Published 2023-06-07 Fixed in 2.1.33 CWE-502