CVE-2026-103519 | roxnor WP Ultimate Review Plugin up to 2.4.3 on WordPress Shortcode do_shortcode code injection

October 3, 2026 Yanac

A vulnerability classified as critical was found in roxnor WP Ultimate Review Plugin up to 2.4.3 on WordPress. This affects the function do_shortcode of the component Shortcode Handler. The manipulation results in code injection.

This vulnerability is reported as CVE-2026-103519. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More