All products

ultimate-reviews

WordPress · Plugin
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Ultimate Reviews <= 3.2.16 - Unauthenticated Insecure Direct Object ReferenceCVE-2026-24634 ultimate-reviews WordPress Medium Fix reported
Ultimate Reviews <= 3.2.14 - Reflected Cross-Site ScriptingCVE-2025-49266 ultimate-reviews WordPress Medium Fix reported
Ultimate Reviews <= 3.2.8 - Unauthenticated stored Cross-Site Scripting via reviewsCVE-2024-25597 ultimate-reviews WordPress Medium Fix reported
Ultimate Reviews < 2.1.33 - PHP Object InjectionCVE-2020-36726 ultimate-reviews WordPress Critical Fix reported
Ultimate Reviews <= 3.0.15 - Authenticated Stored Cross-Site ScriptingCVE-2022-23979 ultimate-reviews WordPress Medium Fix reported