CVE-2024-12309

🗓️ 13 Dec 2024 08:24:51Reported by WordfenceType

WordPress Rate My Post plugin allows unauthenticated voting on unpublished posts due to a vulnerability.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-12309	13 Dec 202408:51	–	circl
CNNVD	WordPress plugin Rate My Post – Star Rating Plugin by FeedbackWP 安全漏洞	13 Dec 202400:00	–	cnnvd
Cvelist	CVE-2024-12309 Rate My Post – Star Rating Plugin by FeedbackWP <= 4.2.4 - Unauthenticated Voting On Scheduled Posts	13 Dec 202408:24	–	cvelist
EUVD	EUVD-2024-50761	3 Oct 202520:07	–	euvd
NVD	CVE-2024-12309	13 Dec 202409:15	–	nvd
Patchstack	WordPress Rate My Post – WP Rating System plugin <= 4.2.4 - Unauthenticated Voting On Scheduled Posts vulnerability	12 Dec 202420:09	–	patchstack
Positive Technologies	PT-2024-17538 · Feedbackwp · Rate My Post – Star Rating Plugin	13 Dec 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-12309	23 May 202506:14	–	redhatcve
Vulnrichment	CVE-2024-12309 Rate My Post – Star Rating Plugin by FeedbackWP <= 4.2.4 - Unauthenticated Voting On Scheduled Posts	13 Dec 202408:24	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 9, 2024 to December 15, 2024)	19 Dec 202417:13	–	wordfence

Vulners

Node

properfraction rate_my_post_star_rating_plugin_by_feedbackwpRange≤4.2.4wordpress

[
  {
    "vendor": "properfraction",
    "product": "Rate My Post – Star Rating Plugin by FeedbackWP",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "4.2.4",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/c9aa467f-9ac2-4a84-b0bb-761101733af7
plugins	www.plugins.trac.wordpress.org/changeset/3206801/rate-my-post/trunk/public/class-rate-my-post-public.php

15 Apr 2026 00:35Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.15.3

EPSS0.00106

SSVC

CWE-639