Wpmet
Wpmet WP Ultimate Review: vulnerabilidades y CVE
Wpmet WP Ultimate Review tiene 10 vulnerabilidades publicadas, 3 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE10
Últimos 12 meses3
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-92235 | Alta (8.1) | 0.36% | — | 22 sept 2026 | The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.2. This is due to the software allowing users to execute an action that does not… |
| CVE-2026-39644 | Media (5.3) | 0.26% | — | 8 abr 2026 | Missing Authorization vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wp Ultimate Review: from n/a through <=… |
| CVE-2025-63057 | Media (6.5) | 0.24% | — | 9 dic 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows DOM-Based XSS.This issue affects Wp Ultimate Review: from n/a… |
| CVE-2024-32685 | Media (5.3) | 0.39% | — | 17 may 2024 | Client-Side Enforcement of Server-Side Security vulnerability in Wpmet Wp Ultimate Review allows Functionality Bypass.This issue affects Wp Ultimate Review: from n/a through 2.2.5. |
| CVE-2024-21746 | Alta (7.5) | 0.48% | — | 17 may 2024 | Authentication Bypass by Spoofing vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows Identity Spoofing.This issue affects Wp Ultimate Review: from n/a through <= 2.3.6. |
| CVE-2024-32684 | Alta (7.5) | 0.39% | — | 22 abr 2024 | Missing Authorization vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5. |
| CVE-2024-32683 | Alta (7.5) | 0.46% | — | 19 abr 2024 | Authorization Bypass Through User-Controlled Key vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5. |
| CVE-2023-28987 | Alta (8.8) | 0.31% | — | 12 nov 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions. |
| CVE-2023-46085 | Alta (8.8) | 0.21% | — | 22 oct 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.2.4 versions. |
| CVE-2023-28751 | Media (4.8) | 0.37% | — | 23 jun 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de Wpmet
Metform Elementor Contact Form Builder · 23Elements KIT Elementor Addons · 14Elementskit · 11Elementskit Elementor Addons · 10Fundengine · 8Gutenkit · 7WP Social Login AND Register Social Counter · 5Elementskit Lite · 2Elementskit Elementor Addons Lite · 2Metform · 1Shopengine · 1WP Fundraising Donation AND Crowdfunding Platform · 1