UNKNOWN NVD

CVE-2026-101160

The WP Ultimate Review WordPress plugin before 2.4.4 does not validate that a submitted review rating is numeric before storing it and later using it in numeric

The WP Ultimate Review WordPress plugin before 2.4.4 does not validate that a submitted review rating is numeric before storing it and later using it in numeric operations when rendering reviews, allowing unauthenticated users to make the reviewed content fail with a fatal error for all visitors until the review is removed (a persistent denial of service), when user reviews are enabled.

References

https://wpscan.com/vulnerability/d728523f-1f33-470f-b64f-e9e286d29b6b/

Published: 2026-10-03 · Source: NVD · Feed updated: 2026-10-03

This unknown severity vulnerability was published on 2026-10-03 via NVD.

vulnfeed aggregates 10770 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.