Vendors / Yet Another Stars Rating Project Yet Another Stars Rating Project Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Yet Another Stars Rating Project records in CISA KEV No Yet Another Stars Rating Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 42
The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasr_get_multi_set_values_and_field SQL injection via the set_id parameter.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01944 · Published 2019-10-10 · No fix listed CWE-89
Priority LOW 35
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in YetAnotherStarsRating.Com YASR – Yet Another Star Rating Plugin for WordPress.This issue affects YASR – Yet Another Star Rating Plugin for WordPress: fro…
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.00405 · Published 2023-11-30 · No fix listed CWE-367
Priority LOW 29
Cross-Site Scripting (XSS) vulnerability discovered in Yasr – Yet Another Stars Rating WordPress plugin (versions <= 2.9.9), vulnerable at parameter 'source'.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00803 · Published 2022-02-04 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 2 1 0 0
THREATIST.IORead the docs