Skip to content
OpenAdvisories

Product · Wpmet

Wp Ultimate Review

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-32685

    WordPress WP Ultimate Review plugin <= 2.2.5 - Review Score Manipulation vulnerability

    Client-Side Enforcement of Server-Side Security vulnerability in Wpmet Wp Ultimate Review allows Functionality Bypass.This issue affects Wp Ultimate Review: from n/a through 2.2.5.

    Wpmet Wp Ultimate Review
  • Medium 5.3
    CVE-2024-32684

    WordPress WP Ultimate Review plugin <= 2.2.5 - Broken Access Control on Review vulnerability

    Missing Authorization vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5.

    Wpmet Wp Ultimate Review
  • Medium 5.3
    CVE-2024-32683

    WordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5.

    Wpmet Wp Ultimate Review
  • Medium 4.3
    CVE-2023-28987

    WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions.

    Wpmet Wp Ultimate Review
  • Medium 4.3
    CVE-2023-46085

    WordPress Wp Ultimate Review Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.2.4 versions.

    Wpmet Wp Ultimate Review
  • Medium 5.9
    CVE-2023-28751

    WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions.

    Wpmet Wp Ultimate Review