Vulnerabilities

TI-2024-21565 CVE-2024-32685 · GHSA-2p92-vrh7-9m5h

WordPress WP Ultimate Review plugin <= 2.2.5 - Review Score Manipulation vulnerability

LOW 32

Client-Side Enforcement of Server-Side Security vulnerability in Wpmet Wp Ultimate Review allows Functionality Bypass.This issue affects Wp Ultimate Review: from n/a through 2.2.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00388 Published 2024-05-17 No fix listed CWE-602

TI-2024-14432 CVE-2024-21746 · GHSA-55ff-crw4-233h

WordPress Wp Ultimate Review plugin <= 2.3.6 - IP limit Bypass vulnerability

LOW 39

Authentication Bypass by Spoofing vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows Identity Spoofing.This issue affects Wp Ultimate Review: from n/a through <= 2.3.6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0048 Published 2024-05-17 No fix listed CWE-290

TI-2024-21564 CVE-2024-32684 · GHSA-5hfx-4fjq-cv5j

WordPress WP Ultimate Review plugin <= 2.2.5 - Broken Access Control on Review vulnerability

LOW 39

Missing Authorization vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00385 Published 2024-04-22 No fix listed CWE-862

TI-2024-21563 CVE-2024-32683 · GHSA-mhc2-rv3c-8qpj

WordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability

LOW 39

Authorization Bypass Through User-Controlled Key vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00464 Published 2024-04-19 No fix listed CWE-639

TI-2023-13449 CVE-2023-28987 · GHSA-4g2c-9347-58ff

WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00309 Published 2023-11-12 No fix listed CWE-352

TI-2023-24738 CVE-2023-46085 · GHSA-3vj4-3g37-rf7w

WordPress Wp Ultimate Review Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.2.4 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-10-22 No fix listed CWE-352

TI-2023-13263 CVE-2023-28751 · GHSA-2j32-c79r-58r7

WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-06-23 No fix listed CWE-79

Vulnerabilities

Filters

WordPress WP Ultimate Review plugin <= 2.2.5 - Review Score Manipulation vulnerability

WordPress Wp Ultimate Review plugin <= 2.3.6 - IP limit Bypass vulnerability

WordPress WP Ultimate Review plugin <= 2.2.5 - Broken Access Control on Review vulnerability

WordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability

WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress Wp Ultimate Review Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)