Search vulnerabilities

Results 1

Export CSV
CVE-2026-24634

WordPress Ultimate Reviews plugin <= 3.2.16 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Rustaurius Ultimate Reviews ultimate-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Reviews: from n/a through <= 3.2.16.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed