CVE-2026-95593

The Ultimeter WordPress plugin versions

EUVD-2026-85502

Editor SQL Injection in Ultimeter = 3.0.8 versions...

WordPress Ultimeter plugin <= 3.0.5 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Ultimeter versions = 3.0.5...

WordPress Ultimeter Plugin < 2.8.3 is vulnerable to Cross Site Scripting (XSS)

Software Ultimeter Type Plugin Vulnerable versions 2.8.3 Fixed in 2.8.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c6dbf05fd248 Credits Rafie Muhammad Patchstack Required...

WordPress Ultimeter plugin < 2.7.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Ultimeter plugin versions 2.7.6. Solution Update the WordPress Ultimeter plugin to the latest available version at least 2.7.6...

WordPress Ultimeter plugin < 2.7.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ultimeter plugin versions 2.7.6. Solution Update the WordPress Ultimeter plugin to the latest available version at least 2.7.6...