Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Blaz K. Component: Rate My Post Clear all filters
TI-2023-28314 CVE-2023-51667 · GHSA-p863-q32c-8f73

WordPress Rate my Post – WP Rating System plugin <= 3.4.2 - Broken Access Control vulnerability

Priority LOW 36

Authentication Bypass by Spoofing vulnerability in FeedbackWP Rate my Post – WP Rating System allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Rate my Post – WP Rating System: from n/a t…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00435 Published 2024-06-04 No fix listed CWE-290
TI-2022-04271 CVE-2022-4673 · GHSA-6x9q-3f3x-4w22

Rate my Post – WP Rating System < 3.3.9 - Contributor+ Stored XSS via Shortcode

Priority MEDIUM 58

The Rate my Post WordPress plugin before 3.3.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00476 Published 2023-01-23 Fixed in 3.3.9