wp_ultimate_review vulnerabilities

CVEs whose affected-version data names the wp_ultimate_review package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-92235High· 8.1

yesterday

The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.2

The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.2. This is due to the software allowing users to execute an action that does not properly validate a…

▾ Twilightroxnor · WP Ultimate ReviewEPSS 0.36%via NVD