Wpmet
Wpmet WP Ultimate Review: vulnerabilidades y CVE
Wpmet WP Ultimate Review tiene 16 vulnerabilidades publicadas, 9 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE16
Últimos 12 meses9
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-103519 | Media (5.4) | 0.27% | — | 3 oct 2026 | The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.3. This is due to the software allowing users to execute an action that does not… |
| CVE-2026-100157 | Media (6.5) | 0.28% | — | 3 oct 2026 | The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.3. This is due to the software allowing users to execute an action that does not… |
| CVE-2026-101162 | Media (6.4) | 0.16% | — | 3 oct 2026 | The WP Ultimate Review WordPress plugin before 2.4.4 does not escape some of its review overview settings before outputting them in posts, which could allow users with a role as low as author to perform Stored… |
| CVE-2026-101161 | Alta (7.5) | 0.16% | — | 3 oct 2026 | The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent unauthenticated users from storing crafted review content that makes the reviewed page fail with a fatal error on every subsequent visit, resulting… |
| CVE-2026-101160 | Alta (7.5) | 0.16% | — | 3 oct 2026 | The WP Ultimate Review WordPress plugin before 2.4.4 does not validate that a submitted review rating is numeric before storing it and later using it in numeric operations when rendering reviews, allowing… |
| CVE-2026-101159 | Alta (7.5) | 0.17% | — | 3 oct 2026 | The WP Ultimate Review WordPress plugin before 2.4.4 does not properly sanitise and escape reviews submitted through its public review form, which is available to unauthenticated visitors, allowing them to perform… |
| CVE-2026-92235 | Alta (8.1) | 0.36% | — | 22 sept 2026 | The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.2. This is due to the software allowing users to execute an action that does not… |
| CVE-2026-39644 | Media (5.3) | 0.26% | — | 8 abr 2026 | Missing Authorization vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wp Ultimate Review: from n/a through <=… |
| CVE-2025-63057 | Media (6.5) | 0.24% | — | 9 dic 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows DOM-Based XSS.This issue affects Wp Ultimate Review: from n/a… |
| CVE-2024-32685 | Media (5.3) | 0.39% | — | 17 may 2024 | Client-Side Enforcement of Server-Side Security vulnerability in Wpmet Wp Ultimate Review allows Functionality Bypass.This issue affects Wp Ultimate Review: from n/a through 2.2.5. |
| CVE-2024-21746 | Alta (7.5) | 0.48% | — | 17 may 2024 | Authentication Bypass by Spoofing vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows Identity Spoofing.This issue affects Wp Ultimate Review: from n/a through <= 2.3.6. |
| CVE-2024-32684 | Alta (7.5) | 0.39% | — | 22 abr 2024 | Missing Authorization vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5. |
| CVE-2024-32683 | Alta (7.5) | 0.46% | — | 19 abr 2024 | Authorization Bypass Through User-Controlled Key vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5. |
| CVE-2023-28987 | Alta (8.8) | 0.31% | — | 12 nov 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions. |
| CVE-2023-46085 | Alta (8.8) | 0.21% | — | 22 oct 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.2.4 versions. |
| CVE-2023-28751 | Media (4.8) | 0.37% | — | 23 jun 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de Wpmet
Metform Elementor Contact Form Builder · 23Elements KIT Elementor Addons · 14Elementskit · 11Elementskit Elementor Addons · 10Fundengine · 8Gutenkit · 7WP Social Login AND Register Social Counter · 6Elementskit Lite · 2Elementskit Elementor Addons Lite · 2Metform · 1Shopengine · 1WP Fundraising Donation AND Crowdfunding Platform · 1