Vulnerabilities

TI-2023-19306 CVE-2023-37867 · GHSA-fxxg-p5jg-fxmj

WordPress Yet Another Stars Rating Plugin <= 3.3.8 is vulnerable to Race Condition

LOW 35

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in YetAnotherStarsRating.Com YASR – Yet Another Star Rating Plugin for WordPress.This issue affects YASR – Yet Another Star Rating Plugin for WordPress: fro…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00405 Published 2023-11-30 No fix listed CWE-367

TI-2022-07943 CVE-2022-23980 · GHSA-grr7-cf92-3q93

WordPress Yasr – Yet Another Stars Rating plugin <= 2.9.9 - Cross-Site Scripting (XSS) vulnerability

LOW 29

Cross-Site Scripting (XSS) vulnerability discovered in Yasr – Yet Another Stars Rating WordPress plugin (versions <= 2.9.9), vulnerable at parameter 'source'.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00803 Published 2022-02-04 No fix listed CWE-79

TI-2015-07842 CVE-2015-9465 · GHSA-q33w-jqv2-jw5m

The yet-another-stars-rating plugin before 0.9.1 for WordPress has…

MEDIUM 42

The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasr_get_multi_set_values_and_field SQL injection via the set_id parameter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01944 Published 2019-10-10 No fix listed CWE-89

Vulnerabilities

Filters

WordPress Yet Another Stars Rating Plugin <= 3.3.8 is vulnerable to Race Condition

WordPress Yasr – Yet Another Stars Rating plugin <= 2.9.9 - Cross-Site Scripting (XSS) vulnerability

The yet-another-stars-rating plugin before 0.9.1 for WordPress has…