Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Lester Chan Component: Wp-postratings Clear all filters
TI-2024-26583 CVE-2024-39659 · GHSA-pwrj-w99j-qxmh

WordPress WP-PostRatings plugin <= 1.91.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Stored XSS.This issue affects WP-PostRatings: from n/a through 1.91.…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00295 Published 2024-08-01 No fix listed CWE-79
TI-2023-21161 CVE-2023-40332 · GHSA-rcjq-rrm8-5g33

WordPress WP-PostRatings plugin <= 1.91 - Rating limit Bypass vulnerability

Priority MEDIUM 48

Improper Control of Interaction Frequency vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Functionality Misuse.This issue affects WP-PostRatings: from n/a through 1.91.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00444 Published 2024-06-04 No fix listed CWE-799
TI-2021-07395 CVE-2021-25117 · GHSA-5c46-pxg6-m63r

WP Postratings < 1.86.1 - Admin+ Stored Cross-Site Scripting

Priority MEDIUM 55

The WP-PostRatings WordPress plugin before 1.86.1 does not sanitise the postratings_image parameter from its options page (wp-admin/admin.php?page=wp-postratings/postratings-options.php).

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00224 Published 2024-01-16 Fixed in 1.86.1 CWE-352
TI-2011-04006 CVE-2011-4646 · GHSA-chv6-6f32-gc59

SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50…

Priority LOW 30

SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50, 1.61, and probably other versions before 1.62 for WordPress allows remote authenticated users with the Author role to execute arbitrary…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01505 Published 2011-11-30 No fix listed CWE-94