{"id":"CVE-2026-92235","published":"2026-09-22T08:16:41.230","lastModified":"2026-09-22T19:04:55.677","description":"The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.2. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with subscriber-level access and above, to execute arbitrary shortcodes.","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cwes":["CWE-94"],"vendors":[],"products":[],"references":[{"url":"https://plugins.trac.wordpress.org/browser/wp-ultimate-review/tags/2.4.2/app/content.php#L189","tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/wp-ultimate-review/tags/2.4.2/app/content.php#L341","tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/wp-ultimate-review/tags/2.4.2/app/content.php#L360","tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/wp-ultimate-review/tags/2.4.2/app/content.php#L56","tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/wp-ultimate-review/tags/2.4.2/init.php#L271","tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/wp-ultimate-review/tags/2.4.2/views/public/meta-box-user-review.php#L538","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3703958%40wp-ultimate-review&new=3703958%40wp-ultimate-review","tags":[]},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dc0fe855-97b7-46ef-b1c8-1602447e97e6?source=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw allows authenticated attackers with subscriber-level access or higher to execute arbitrary shortcodes, leading to potential unauthorized actions on the WordPress site.","exploitability":"Exploitation is moderately easy given the attacker needs only subscriber-level access, but the required action is not trivial.","blast_radius":"If exploited, this could lead to significant damage, such as data manipulation or site compromise, affecting the entire site.","remediation":"Upgrade to version 2.4.3 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","auth-bypass","web"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-03T09:05:53.416Z"}}