Skip to content
OpenAdvisories

Archive

3 October 2026

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-96451 Public exploit

    WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1.

  • High 7.5
    CVE-2026-101160 Public exploit

    WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Non-Numeric Review Rating

    The WP Ultimate Review WordPress plugin before 2.4.4 does not validate that a submitted review rating is numeric before storing it and later using it in numeric operations when rendering reviews, allowing unauthenticated users to make the reviewed content fai…

  • High 7.5
    CVE-2026-101161 Public exploit

    WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Unset Display Settings in wp-reviews Shortcode

    The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent unauthenticated users from storing crafted review content that makes the reviewed page fail with a fatal error on every subsequent visit, resulting in a persistent denial of service when th…