Lucene search
N/APATCHSTACK:EF07C0FC9DA7C1ECF98BD274420DC9CFHistoryNov 30, 2011 - 12:00 a.m.
WordPress WP-PostRatings plugin <= 1.61 - SQL Injecion (SQLi) vulnerability
2011-11-3000:00:00
N/A
patchstack.com
9
0.002 Low
EPSS
Percentile
60.8%
Because of this vulnerability in wp-postratings.php, the authenticated users can execute arbitrary SQL commands via the id attribute of the rating shortcode when creating a post.
Solution
Update the plugin to the latest available version (at least 1.62).
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp-postratings | le | 1.61 |
Related
cve
cve
CVE-2011-4646
2022-10-03 16:15:13
wpvulndb
wpvulndb
WP Postratings < 1.62 - Authenticated SQL Injection
2011-10-06 00:00:00
prion
prion
Sql injection
2011-11-30 19:55:00
nvd
nvd
CVE-2011-4646
2011-11-30 19:55:00
cvelist
cvelist
CVE-2011-4646
2022-10-03 16:15:13