CVE-2026-4301

🗓️ 05 Jun 2026 19:28:28Reported by redhat.comType

Rate Star Review Vote plugin for WordPress allows authenticated users to take over arbitrary posts via rating_id in update form, altering title, content, author, post type, status, and metadata.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2026-4301	12 May 202607:48	–	attackerkb
Circl	CVE-2026-4301	12 May 202622:33	–	circl
CNNVD	WordPress plugin Rate Star Review Vote - AJAX Reviews, Votes, Star Ratings 安全漏洞	12 May 202600:00	–	cnnvd
CVE	CVE-2026-4301	12 May 202607:48	–	cve
Cvelist	CVE-2026-4301 Rate Star Review Vote <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'rating_id' Parameter	12 May 202607:48	–	cvelist
EUVD	EUVD-2026-29393	12 May 202609:31	–	euvd
NVD	CVE-2026-4301	12 May 202609:16	–	nvd
Patchstack	WordPress Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings plugin <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification vulnerability	11 May 202619:07	–	patchstack
Positive Technologies	PT-2026-39948	12 May 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-4301 Rate Star Review Vote <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'rating_id' Parameter	12 May 202607:48	–	vulnrichment