Vulnerabilities

TI-2022-19147 CVE-2022-40310 · GHSA-wgh8-h75r-c4qw

WordPress Rate my Post – WP Rating System plugin <= 3.3.4 - Race Condition vulnerability

LOW 20

Authenticated (subscriber+) Race Condition vulnerability in Rate my Post – WP Rating System plugin <= 3.3.4 at WordPress allows attackers to increase/decrease votes.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0046 Published 2022-09-23 No fix listed CWE-362

TI-2022-19308 CVE-2022-40671 · GHSA-q9pg-4hmx-4cfv

WordPress Rate my Post – WP Rating System plugin <= 3.3.4 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 20

Cross-Site Request Forgery (CSRF) vulnerability in Rate my Post – WP Rating System plugin <= 3.3.4 at WordPress.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00323 Published 2022-09-23 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Rate my Post – WP Rating System plugin <= 3.3.4 - Race Condition vulnerability

WordPress Rate my Post – WP Rating System plugin <= 3.3.4 - Cross-Site Request Forgery (CSRF) vulnerability