Detections
Analytics
CVE-2026-101161
high
Description
The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent unauthenticated users from storing crafted review content that makes the reviewed page fail with a fatal error on every subsequent visit, resulting in a persistent denial of service when the WP Ultimate Review WordPress plugin before 2.4.4's review display settings have never been saved.
References
https://wpscan.com/vulnerability/c1c3e2d7-4833-4e51-a3c7-45e6d036a525/