The 5 Stars Rating Funnel WordPress Plugin | RRatingg WordPress plugin before 1.2.54 does not properly sanitise, validate and escape lead ids before using them in a SQL statement via the rrtngg_delete_leads AJAX action,…
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.01749·Published 2022-04-25·Fixed in 1.2.54CWE-89