CVE-2026-100157 | roxnor WP Ultimate Review Plugin up to 2.4.3 on WordPress Shortcode do_shortcode code injection

October 3, 2026 Yanac

A vulnerability labeled as critical has been found in roxnor WP Ultimate Review Plugin up to 2.4.3 on WordPress. This issue affects the function do_shortcode of the component Shortcode Handler. Such manipulation leads to code injection.

This vulnerability is listed as CVE-2026-100157. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More