Wpmet Wp Ultimate Review — known CVE vulnerabilities

Every CVE whose affected-product data names Wpmet Wp Ultimate Review, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2023-28751 — CVSS 5.9 (medium): Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions.
• CVE-2024-21746 — CVSS 5.3 (medium): Authentication Bypass by Spoofing vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows Identity Spoofing.This issue affects…
• CVE-2024-32684 — CVSS 5.3 (medium): Missing Authorization vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5.
• CVE-2024-32685 — CVSS 5.3 (medium): Client-Side Enforcement of Server-Side Security vulnerability in Wpmet Wp Ultimate Review allows Functionality Bypass.This issue affects Wp…
• CVE-2024-32683 — CVSS 5.3 (medium): Authorization Bypass Through User-Controlled Key vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a…
• CVE-2023-46085 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.2.4 versions.
• CVE-2023-28987 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions.