WordPress Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings plugin <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Post Modification vulnerability discovered by cpforensic in WordPress Plugin Rate Star Review versions = 1.6.4...

CVE-2026-45667

creationtimestamp| type| source ---|---|--- 2026-05-11 19:07:10+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-m69w-p7m4-585j 2026-05-16 00:24:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlwlgnytx32i...

CVE-2026-45003

creationtimestamp| type| source ---|---|--- 2026-05-11 19:03:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllxo3pxue2r 2026-05-11 19:03:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllxo3pxue2r...

CVE-2026-44997

creationtimestamp| type| source ---|---|--- 2026-05-11 18:53:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllx36epxz2r 2026-05-11 18:53:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllx36epxz2r...

CVE-2026-45665

creationtimestamp| type| source ---|---|--- 2026-05-11 18:42:11+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-cqp4-qqvg-3787 2026-05-16 00:45:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlwmkigryb2e...

CVE-2026-4890

creationtimestamp| type| source ---|---|--- 2026-05-11 18:40:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllwemsz4v2c 2026-05-12 09:24:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnhr2mtcj2s 2026-05-13 12:31:36+00:00| seen|...

CVE-2026-43639

creationtimestamp| type| source ---|---|--- 2026-05-11 18:24:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvhlnan72e...

CVE-2026-44413

creationtimestamp| type| source ---|---|--- 2026-05-11 18:22:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvdvujox2l 2026-05-11 18:22:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvdvujox2l 2026-05-12 12:31:51+00:00| seen|...

CVE-2026-42858

creationtimestamp| type| source ---|---|--- 2026-05-11 18:18:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllv5f5zlk2c 2026-05-11 18:18:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllv5f5zlk2c...

CVE-2026-43640

creationtimestamp| type| source ---|---|--- 2026-05-11 18:17:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllv3ug34r2k 2026-05-11 18:17:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllv3ug34r2k 2026-05-16 18:07:08+00:00| seen|...

CVE-2026-38566

HireFlow v1.2 does not implement CSRF token validation on any state-changing POST endpoint. All forms password change at /profile, candidate deletion at /candidates/delete/, feedback submission at /feedback/add/, interview scheduling at /interviews/add are vulnerable to CSRF. An attacker who can...

CVE-2026-43434

creationtimestamp| type| source ---|---|--- 2026-05-11 18:01:23+00:00| seen| https://mastodon.social/ap/users/115755483699003887/statuses/116557246423998157 2026-05-11 19:00:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllxhbfqww2n 2026-05-11 19:00:01+00:00| seen|...

CVE-2026-7210

creationtimestamp| type| source ---|---|--- 2026-05-11 17:56:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlltwjtgei2s 2026-05-11 19:35:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllzgb52dt2n 2026-05-11 19:35:14+00:00| seen|...

CVE-2026-33361

creationtimestamp| type| source ---|---|--- 2026-05-11 17:39:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllsxf64cc2g...

CVE-2026-33359

creationtimestamp| type| source ---|---|--- 2026-05-11 17:39:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllsx6dccq2t...

CVE-2026-33362

creationtimestamp| type| source ---|---|--- 2026-05-11 17:28:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllsczlryu2l...

CVE-2026-43437

creationtimestamp| type| source ---|---|--- 2026-05-11 17:08:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllr6chqak2w 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

CVE-2026-7813

creationtimestamp| type| source ---|---|--- 2026-05-11 16:35:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllpeq4bsy26 2026-05-25 20:00:33+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mmpbefa3oc23 2026-05-26 15:07:07+00:00| seen|...

CVE-2026-43469

creationtimestamp| type| source ---|---|--- 2026-05-11 15:42:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllmggdmaa2c 2026-07-02 07:17:15+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260702 2026-08-03 07:13:09+00:00...

CVE-2026-43466

creationtimestamp| type| source ---|---|--- 2026-05-11 15:42:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllmg7flbf2s 2026-08-03 07:13:07+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...