CVE-2024-21746
WordPress Wp Ultimate Review plugin <= 2.3.6 - IP limit Bypass vulnerability
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Authentication Bypass by Spoofing vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows Identity Spoofing.This issue affects Wp Ultimate Review: from n/a through <= 2.3.6.
| CWE | CWE-290 |
| Vendor | roxnor |
| Product | wp ultimate review |
| Published | May 17, 2024 |
| Last Updated | Apr 1, 2026 |
Stay Ahead of the Next One
Get instant alerts for roxnor wp ultimate review
Be the first to know when new unknown vulnerabilities affecting roxnor wp ultimate review are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Roxnor / Wp Ultimate Review
0 ≤ 2.3.6
References
patchstack.com: https://patchstack.com/database/Wordpress/Plugin/wp-ultimate-review/vulnerability/wordpress-wp-ultimate-review-plugin-2-2-5-ip-limit-bypass-vulnerability?_s_id=cve patchstack.com: https://patchstack.com/database/vulnerability/wp-ultimate-review/wordpress-wp-ultimate-review-plugin-2-2-5-ip-limit-bypass-vulnerability?_s_id=cve
Credits
Mika | Patchstack Bug Bounty Program