Read the docs

Lester Chan

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Lester Chan records in CISA KEV

No Lester Chan vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp-postratings 5 records MEDIUM Wp-downloadmanager 1 record LOW Wp-email 1 record MEDIUM Wp-postviews 1 record LOW Wp-useronline 1 record MEDIUM

Records

5 records in Wp-postratings · all components

TI-2021-07395 CVE-2021-25117 · GHSA-5c46-pxg6-m63r

WP Postratings < 1.86.1 - Admin+ Stored Cross-Site Scripting

Priority MEDIUM 55

The WP-PostRatings WordPress plugin before 1.86.1 does not sanitise the postratings_image parameter from its options page (wp-admin/admin.php?page=wp-postratings/postratings-options.php).

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00224 Published 2024-01-16 Fixed in 1.86.1 CWE-352
TI-2023-21161 CVE-2023-40332 · GHSA-rcjq-rrm8-5g33

WordPress WP-PostRatings plugin <= 1.91 - Rating limit Bypass vulnerability

Priority MEDIUM 48

Improper Control of Interaction Frequency vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Functionality Misuse.This issue affects WP-PostRatings: from n/a through 1.91.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00444 Published 2024-06-04 No fix listed CWE-799
TI-2011-04006 CVE-2011-4646 · GHSA-chv6-6f32-gc59

SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50…

Priority LOW 30

SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50, 1.61, and probably other versions before 1.62 for WordPress allows remote authenticated users with the Author role to execute arbitrary…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01505 Published 2011-11-30 No fix listed CWE-94
TI-2024-26583 CVE-2024-39659 · GHSA-pwrj-w99j-qxmh

WordPress WP-PostRatings plugin <= 1.91.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Stored XSS.This issue affects WP-PostRatings: from n/a through 1.91.…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00295 Published 2024-08-01 No fix listed CWE-79
Open these records in search →