CVE-2022-23979: Etoilewebdesign Ultimate Reviews

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability discovered in Ultimate Reviews WordPress plugin (versions <= 3.0.15).

Affected products

• Etoilewebdesign Ultimate Reviews: up to and including 3.0.15

Published 2022-01-28. Last modified 2026-06-17.