Roxnor WP Ultimate Review

• CVE-2026-100157 Medium 6.5 WP Ultimate Review <= 2.4.3 - Unauthenticated Arbitrary Shortcode Execution via 'xs_reviw_summery' Parameter (Split-Shortcode / Late-Registered Shortcode) 0.3%
• CVE-2026-103519 Medium 5.4 WP Ultimate Review <= 2.4.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_reviw_summery' Parameter 0.3%
• CVE-2026-92235 High 8.1 WP Ultimate Review <= 2.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_submit_review_data[xs_reviw_summery]' Parameter 0.4%
• CVE-2026-39644 Medium 5.3 WordPress Wp Ultimate Review plugin <= 2.3.8 - Broken Access Control vulnerability 0.2%
• CVE-2025-63057 Medium 6.5 WordPress Wp Ultimate Review plugin <= 2.3.7 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2024-21746 Medium 5.3 WordPress Wp Ultimate Review plugin <= 2.3.6 - IP limit Bypass vulnerability 0.5%