Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-88225
HistorySep 28, 2022 - 12:00 a.m.

WordPress Rate my Post - WP Rating System Cross-Site Request Forgery Vulnerability

2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
15
wordpress
rate my post
wp rating system
cross-site request forgery
vulnerability
php
blogging platform
plugin
web application
attacker
spoofing

EPSS

0.001

Percentile

20.8%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Rate my Post - WP Rating System 3.3.4 and earlier versions are vulnerable to cross-site request forgery. The vulnerability stems from the WEB application not adequately verifying that the request is from a trusted user. An attacker could exploit the vulnerability to spoof malicious requests to trick victims into clicking through to perform sensitive actions.

EPSS

0.001

Percentile

20.8%