The WP Ultimate Review WordPress plugin before version 2.4.4 does not validate that a submitted review rating is numeric before storing it. When a non-numeric rating is stored, the plugin later performs numeric operations on that value while rendering reviews, causing a fatal error. This fatal error prevents all visitors from viewing reviews, resulting in a persistent denial of service for the portion of the site that displays reviews.

WordPress sites that have the WP Ultimate Review plugin installed at a version earlier than 2.4.4 and have the user-review feature enabled are impacted. The plugin is listed by CNAs as Unknown:WP Ultimate Review; no additional vendors or product variants are indicated.

Unauthenticated users can post a review with a non-numeric rating to trigger the fault. Because the plugin processes the rating as a numeric value during rendering, the fault is triggered for any visitor who loads a page that displays the affected review. The EPSS score is below 1% and the CVSS score is 7.5, indicating a high risk but relatively low likelihood of exploitation. The vulnerability is not cited in the CISA KEV catalog. Repeated publishing of malicious reviews could sustain the denial of service until the offending content is removed.