WordPress Ultimate Reviews plugin <= 3.2.16 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Doan Dinh Van in WordPress Plugin Ultimate Reviews versions = 3.2.16...

CVE-2024-25597 WordPress Ultimate Reviews plugin <= 3.2.8 - Unauthenticated Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Etoile Web Design Ultimate Reviews allows Stored XSS.This issue affects Ultimate Reviews: from n/a through 3.2.8...

WordPress Ultimate Reviews Plugin <= 3.2.8 is vulnerable to Cross Site Scripting (XSS)

Software Ultimate Reviews Type Plugin Vulnerable versions = 3.2.8 Fixed in 3.2.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-25597 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9a3542c0e41a Credits Kang SeoHee Required privilege...