CVE-2026-101161 — WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Unset Display Settings in wp-reviews Shortcode

CVE-2026-101161

WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Unset Display Settings in wp-reviews Shortcode PUBLISHED

Description (CNA)

The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent unauthenticated users from storing crafted review content that makes the reviewed page fail with a fatal error on every subsequent visit, resulting in a persistent denial of service when the WP Ultimate Review WordPress plugin before 2.4.4's review display settings have never been saved.

Affected (CNA)

Vendor / product	Versions
Unknown / WP Ultimate Review	affected 0 before 2.4.4

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/c1c3e2d7-4833-4e51-a3c7-45e6d036a525/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.