<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: wp ultimate review</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-32685: Client-Side Enforcement of Server-Side Security vulnerability in Wpmet Wp Ultimate Review allows Functionality</title><link>https://patchthecve.com/cve/CVE-2024-32685.html</link><guid>https://patchthecve.com/cve/CVE-2024-32685.html</guid><pubDate>Wed, 17 Jun 2026 07:30:13 +0000</pubDate><description>MEDIUM 5.3: Client-Side Enforcement of Server-Side Security vulnerability in Wpmet Wp Ultimate Review allows Functionality Bypass.This issue affects Wp Ultimate Review: from n/a through 2.2.5.</description></item><item><title>CVE-2024-21746: Authentication Bypass by Spoofing vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows Identit</title><link>https://patchthecve.com/cve/CVE-2024-21746.html</link><guid>https://patchthecve.com/cve/CVE-2024-21746.html</guid><pubDate>Wed, 17 Jun 2026 07:10:04 +0000</pubDate><description>MEDIUM 5.3: Authentication Bypass by Spoofing vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows Identity Spoofing.This issue affects Wp Ultimate Review: from n/a through &lt;= 2.3.6.</description></item><item><title>CVE-2024-32684: Missing Authorization vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/</title><link>https://patchthecve.com/cve/CVE-2024-32684.html</link><guid>https://patchthecve.com/cve/CVE-2024-32684.html</guid><pubDate>Wed, 17 Jun 2026 07:30:13 +0000</pubDate><description>MEDIUM 5.3: Missing Authorization vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5.</description></item><item><title>CVE-2024-32683: Authorization Bypass Through User-Controlled Key vulnerability in Wpmet Wp Ultimate Review.This issue affects </title><link>https://patchthecve.com/cve/CVE-2024-32683.html</link><guid>https://patchthecve.com/cve/CVE-2024-32683.html</guid><pubDate>Wed, 17 Jun 2026 07:30:13 +0000</pubDate><description>MEDIUM 5.3: Authorization Bypass Through User-Controlled Key vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5.</description></item><item><title>CVE-2023-28987: Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin &lt;= 2.0.3 versions.</title><link>https://patchthecve.com/cve/CVE-2023-28987.html</link><guid>https://patchthecve.com/cve/CVE-2023-28987.html</guid><pubDate>Wed, 17 Jun 2026 05:49:08 +0000</pubDate><description>MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin &lt;= 2.0.3 versions.</description></item><item><title>CVE-2023-46085: Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin &lt;= 2.2.4 versions.</title><link>https://patchthecve.com/cve/CVE-2023-46085.html</link><guid>https://patchthecve.com/cve/CVE-2023-46085.html</guid><pubDate>Wed, 17 Jun 2026 06:30:00 +0000</pubDate><description>MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin &lt;= 2.2.4 versions.</description></item><item><title>CVE-2023-28751: Auth</title><link>https://patchthecve.com/cve/CVE-2023-28751.html</link><guid>https://patchthecve.com/cve/CVE-2023-28751.html</guid><pubDate>Wed, 17 Jun 2026 05:48:41 +0000</pubDate><description>MEDIUM 5.9: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wpmet Wp Ultimate Review plugin &lt;= 2.0.3 versions.</description></item></channel></rss>