Approved changes feed: RSS · Atom

cpe:2.3:a:wpmet:wp_ultimate_review:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWpmet (bd15281a-fefd-5c31-99d6-3b159865bbf7)
ProductWp Ultimate Review (2c080b39-abf1-52ab-99ba-8a873371ca8b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-32685 vulnerable 2026-06-03 14:55:47.738998 WordPress WP Ultimate Review plugin <= 2.2.5 - Review Score Manipulation vulnerability
MEDIUM (5.3)
Client-Side Enforcement of Server-Side Security vulnerability in Wpmet Wp Ultimate Review allows Functionality Bypass.This issue affects Wp Ultimate Review: from n/a through 2.2.5.
Published: 2024-05-17T08:59:35.766Z
Updated: 2026-04-28T16:09:38.876Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32684 vulnerable 2026-06-03 14:55:47.738544 WordPress WP Ultimate Review plugin <= 2.2.5 - Broken Access Control on Review vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5.
Published: 2024-04-22T10:38:22.995Z
Updated: 2026-04-28T16:09:38.589Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32683 vulnerable 2026-06-03 14:55:47.737454 WordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability
MEDIUM (5.3)
Authorization Bypass Through User-Controlled Key vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5.
Published: 2024-04-19T11:57:31.907Z
Updated: 2026-04-28T16:09:39.013Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46085 vulnerable 2026-06-03 14:53:08.914702 WordPress Wp Ultimate Review Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.2.4 versions.
Published: 2023-10-22T21:11:59.362Z
Updated: 2026-04-28T16:08:45.035Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28987 vulnerable 2026-06-03 14:51:39.221331 WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions.
Published: 2023-11-12T21:28:13.719Z
Updated: 2026-04-28T16:08:17.054Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28751 vulnerable 2026-06-03 14:51:37.398921 WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions.
Published: 2023-06-23T12:26:27.148Z
Updated: 2026-04-28T16:08:16.589Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.