CVE-2026-103234 | Ultimate Review Plugin up to 2.4.4 on WordPress Shortcode code injection

October 22, 2026 Yanac

A vulnerability was found in Ultimate Review Plugin up to 2.4.4 on WordPress. It has been classified as critical. This affects an unknown part of the component Shortcode Handler. This manipulation causes code injection.

This vulnerability is registered as CVE-2026-103234. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More