Skip to contentRoxnor Wp Ultimate Review vulnerabilities
- roxnor wp ultimate reviewWP Ultimate Review < 2.4.5 - Unauthenticated Arbitrary Shortcode Execution via Reviewer EmailCVE-2026-1032344.8 Medium
- roxnor wp ultimate reviewWP Ultimate Review <= 2.4.3 - Unauthenticated Arbitrary Shortcode Execution via 'xs_reviw_summery' Parameter (Split-Shortcode / Late-Registered Shortcode)CVE-2026-1001576.5 Medium
- roxnor wp ultimate reviewWP Ultimate Review <= 2.4.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_reviw_summery' ParameterCVE-2026-1035195.4 Medium
- roxnor wp ultimate reviewWP Ultimate Review < 2.4.4 - Author+ Stored XSS via Review Overview SettingsCVE-2026-101162Public exploit6.4 Medium
- roxnor wp ultimate reviewWP Ultimate Review < 2.4.4 - Unauthenticated DoS via Unset Display Settings in wp-reviews ShortcodeCVE-2026-101161Public exploit7.5 High
- roxnor wp ultimate reviewWP Ultimate Review < 2.4.4 - Unauthenticated DoS via Non-Numeric Review RatingCVE-2026-101160Public exploit7.5 High
- roxnor wp ultimate reviewWP Ultimate Review < 2.4.4 - Unauthenticated Stored XSS via Review SubmissionCVE-2026-1011597.5 High
- roxnor wp ultimate reviewWP Ultimate Review <= 2.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_submit_review_data[xs_reviw_summery]' ParameterCVE-2026-922358.1 High
- roxnor wp ultimate reviewWordPress Wp Ultimate Review plugin <= 2.3.8 - Broken Access Control vulnerabilityCVE-2026-396445.3 Medium
- roxnor wp ultimate reviewWordPress Wp Ultimate Review plugin <= 2.3.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-630576.5 Medium
- roxnor wp ultimate reviewWordPress WP Ultimate Review plugin <= 2.2.5 - Review Score Manipulation vulnerabilityCVE-2024-326855.3 Medium
- roxnor wp ultimate reviewWordPress Wp Ultimate Review plugin <= 2.3.6 - IP limit Bypass vulnerabilityCVE-2024-217465.3 Medium
- roxnor wp ultimate reviewWordPress WP Ultimate Review plugin <= 2.2.5 - Broken Access Control on Review vulnerabilityCVE-2024-326845.3 Medium
- roxnor wp ultimate reviewWordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2024-326835.3 Medium
- roxnor wp ultimate reviewWordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-289874.3 Medium
- roxnor wp ultimate reviewWordPress Wp Ultimate Review Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-460854.3 Medium
- roxnor wp ultimate reviewWordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)CVE-2023-287515.9 Medium