What’s Vulnerable › Products

Rustaurius Ultimate Reviews vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Rustaurius Ultimate Reviews version is affected

Latest Rustaurius Ultimate Reviews vulnerabilities

• CVE-2026-24634 — WordPress Ultimate Reviews plugin <= 3.2.16 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3)
• CVE-2025-49266 — WordPress Ultimate Reviews plugin <= 3.2.14 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2024-25597 — WordPress Ultimate Reviews plugin <= 3.2.8 - Unauthenticated Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
• CVE-2020-36726 — Ultimate Reviews < 2.1.33 - PHP Object Injection (CVSS 9.8)
• CVE-2022-23979 — WordPress Ultimate Reviews plugin <= 3.0.15 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 4.8)