Cpe:2.3:a:wp_ultimate_review_project:wp_ultimate_review:*:*:*:*:*:wordpress:*:*

The WP Ultimate Review plugin for WordPress contains an arbitrary shortcode execution vulnerability (CVE-2026-92235) that allows authenticated attackers with subscriber-level access to execute arbitrary shortcodes.