{"id":"CVE-2026-101159","published":"2026-10-03T06:16:38.023","lastModified":"2026-10-06T15:18:12.170","description":"The WP Ultimate Review WordPress plugin before 2.4.4 does not properly sanitise and escape reviews submitted through its public review form, which is available to unauthenticated visitors, allowing them to perform Stored Cross-Site Scripting attacks against any user, including administrators, viewing a page displaying the review, when user reviews are enabled.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/1eefa81e-6134-498b-9615-b9a42cd99749/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The WP Ultimate Review plugin allows unauthenticated users to submit reviews with malicious scripts that get stored and executed when other users view those reviews, potentially leading to admin compromise.","exploitability":"Exploitation requires a user to submit a review with XSS payload through the public form, which is relatively straightforward but depends on user interaction with the review display page.","blast_radius":"The impact could be significant as attackers can execute scripts against any user who views affected review pages, including administrators with elevated privileges.","remediation":"Upgrade to version 2.4.4 or later to fix the stored XSS vulnerability in the WP Ultimate Review plugin.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["xss","wordpress","plugin"],"model":"garnet-coder","analyzedAt":"2026-10-12T09:01:55.643Z"}}