This vulnerability in the Wp Ultimate Review plugin allows an attacker to bypass authentication by spoofing identity. It affects all versions up to 2.3.6. The issue is categorized as an authentication bypass by spoofing, which could allow unauthorized access or actions within the affected plugin context. No CVSS score or detailed technical exploit data is available, and no patch or mitigation details have been published by the vendor.

Successful exploitation could allow an attacker to bypass authentication controls in the Wp Ultimate Review plugin, potentially leading to unauthorized actions or access within the WordPress environment where the plugin is installed. The exact impact depends on how the plugin is used and integrated but may include privilege escalation or unauthorized content manipulation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider disabling or removing the affected plugin version if possible or applying any recommended temporary mitigations from the vendor once available.