Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2024-25597

WordPress Ultimate Reviews plugin <= 3.2.8 - Unauthenticated Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Etoile Web Design Ultimate Reviews allows Stored XSS.This issue affects Ultimate Reviews: from n/a through 3.2.8.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Etoilewebdesign
Products
Ultimate Reviews
CVE-2020-36726

Ultimate Reviews < 2.1.33 - PHP Object Injection

The Ultimate Reviews plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.1.32 via deserialization of untrusted input in several vulnerable functions. This allows unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin.

CVSS 3.1 · 9.8 Critical EPSS 1.6% KEV · Not listed
Vendors
Etoilewebdesign
Products
Ultimate Reviews
CVE-2022-23979

WordPress Ultimate Reviews plugin <= 3.0.15 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability discovered in Ultimate Reviews WordPress plugin (versions <= 3.0.15).

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Etoilewebdesign
Products
Ultimate Reviews