Description
Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.2.4 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Wpmet | Wp Ultimate Review | ≤ 2.2.4 | — |
Medium · 4.3
CVE-2023-46085
EUVD-2023-50346GHSA-3vj4-3g37-rf7w
WordPress Wp Ultimate Review Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)
Published Oct 22, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack