Vulnerabilities

TI-2023-15428 CVE-2023-32125 · GHSA-j28c-2mmq-8j4f

WordPress Multi Rating Plugin <= 5.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.6 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00312 Published 2023-11-09 No fix listed CWE-352

TI-2023-15433 CVE-2023-32130 · GHSA-rwh9-5jcm-w345

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.6 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-08-18 No fix listed CWE-79

TI-2022-23510 CVE-2022-47433 · GHSA-8j8f-cx8f-89mc

LOW 31

Unauth. Reflected Cross-Site Scripting vulnerability in Daniel Powney Multi Rating plugin <= 5.0.5 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-03-29 No fix listed CWE-79

TI-2022-23520 CVE-2022-47443 · GHSA-8rgr-f33p-72v4

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.5 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00326 Published 2023-03-14 No fix listed CWE-352