CyberRota Analysis
AI-GeneratedThe WP Ultimate Review plugin for WordPress versions prior to 2.4.4 is vulnerable due to inadequate validation of review ratings, allowing unauthenticated users to submit non-numeric values. This can lead to a persistent denial of service, causing fatal errors that affect all visitors until the problematic review is removed. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The WP Ultimate Review WordPress plugin before 2.4.4 does not validate that a submitted review rating is numeric before storing it and later using it in numeric operations when rendering reviews, allowing unauthenticated users to make the reviewed content fail with a fatal error for all visitors until the review is removed (a persistent denial of service), when user reviews are enabled.