Vulnerabilities

TI-2023-09516 CVE-2023-23702 · GHSA-7m7m-p296-cg75

WordPress Comments Ratings Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pixelgrade Comments Ratings plugin <= 1.1.7 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-11-06 No fix listed CWE-79

TI-2023-24455 CVE-2023-45654 · GHSA-8j9h-fmv7-4h7w

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade Comments Ratings plugin <= 1.1.7 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00259 Published 2023-10-16 No fix listed CWE-352

TI-2023-09518 CVE-2023-23704 · GHSA-2p68-5cjx-px9g

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade Comments Ratings plugin <= 1.1.6 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-07-11 No fix listed CWE-352