Etoilewebdesign Ultimate Reviews — known CVE vulnerabilities

Every CVE whose affected-product data names Etoilewebdesign Ultimate Reviews, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2020-36726 — CVSS 9.8 (critical): The Ultimate Reviews plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.1.32 via…
• CVE-2024-25597 — CVSS 7.1 (high): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Etoile Web Design Ultimate Reviews…
• CVE-2022-23979 — CVSS 4.8 (medium): Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability discovered in Ultimate Reviews WordPress plugin (versions <= 3.0.15).