CVE-2024-39659 WordPress WP-PostRatings plugin <= 1.91.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Stored XSS.This issue affects WP-PostRatings: from n/a through 1.91.1...

WordPress WP-PostRatings plugin <= 1.91.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin WP-PostRatings versions = 1.91.1...

WordPress WP-PostRatings Plugin <= 1.91.1 is vulnerable to Cross Site Scripting (XSS)

Software WP-PostRatings Type Plugin Vulnerable versions = 1.91.1 Fixed in 1.91.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-39659 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3a1b8a0a2985 Credits stealthcopter Required privilege...

WordPress WP-PostRatings plugin Access Control Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An Access Control Error...

CVE-2023-40332

Improper Control of Interaction Frequency vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Functionality Misuse.This issue affects WP-PostRatings: from n/a through 1.91...

CVE-2023-40332

Improper Control of Interaction Frequency vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Functionality Misuse.This issue affects WP-PostRatings: from n/a through 1.91...

CVE-2023-40332 WordPress WP-PostRatings plugin <= 1.91 - Rating limit Bypass vulnerability

Improper Control of Interaction Frequency vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Functionality Misuse.This issue affects WP-PostRatings: from n/a through 1.91...

CVE-2023-40332 WordPress WP-PostRatings plugin <= 1.91 - Rating limit Bypass vulnerability

Improper Control of Interaction Frequency vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Functionality Misuse.This issue affects WP-PostRatings: from n/a through 1.91...

PT-2024-12885 · WordPress · Wp-Postratings

Name of the Vulnerable Software and Affected Versions: WP-PostRatings versions 1.91 and earlier Description: The issue is related to an Improper Control of Interaction Frequency vulnerability, allowing Functionality Misuse in WP-PostRatings. Recommendations: For WP-PostRatings versions 1.91 and...

WordPress plugin WP-PostRatings 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An Access Control Error...

CVE-2011-10006

A vulnerability was found in GamerZ WP-PostRatings up to 1.64. It has been classified as problematic. This affects an unknown part of the file wp-postratings.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.65 is able to...

CVE-2011-10006

GamerZ WP-PostRatings up to 1.64 contains a cross-site scripting (XSS) flaw in wp-postratings.php. The vulnerability, which can be triggered remotely, affects an unknown part of the file and can be exploited without user privileges, with user interaction required. The issue is mitigated by upgrad...

CVE-2011-10006 GamerZ WP-PostRatings wp-postratings.php cross site scripting

A vulnerability was found in GamerZ WP-PostRatings up to 1.64. It has been classified as problematic. This affects an unknown part of the file wp-postratings.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.65 is able to...

WP-PostRatings 跨站脚本漏洞

WP-PostRatings is a plugin for adding comment functionality. A cross-site scripting vulnerability exists in WP-PostRatings version 1.64 and earlier, which stems from the presence of a location section in wp-postratings.php that leads to cross-site scripting...

The vulnerability of the PostRatings plugin of the WordPress content management system allows a hacker to perform a CSRF attack.

The vulnerability of the Database Administrator plugin for WordPress content management systems is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute a CSRF attack remotely...

CVE-2021-25117

The WP-PostRatings WordPress plugin before 1.86.1 does not sanitise the postratingsimage parameter from its options page wp-admin/admin.php?page=wp-postratings/postratings-options.php. Even though the page is only accessible to administrators, and protected against CSRF attacks, the issue is stil...

Cross site request forgery (csrf)

The WP-PostRatings WordPress plugin before 1.86.1 does not sanitise the postratingsimage parameter from its options page wp-admin/admin.php?page=wp-postratings/postratings-options.php. Even though the page is only accessible to administrators, and protected against CSRF attacks, the issue is stil...

CVE-2021-25117 WP Postratings < 1.86.1 - Admin+ Stored Cross-Site Scripting

The WP-PostRatings WordPress plugin before 1.86.1 does not sanitise the postratingsimage parameter from its options page wp-admin/admin.php?page=wp-postratings/postratings-options.php. Even though the page is only accessible to administrators, and protected against CSRF attacks, the issue is stil...

CVE-2021-25117

CVE-2021-25117 affects the WP-PostRatings WordPress plugin prior to 1.86.1. The issue is that the plugin does not sanitize the postratings_image parameter on the options page (wp-admin/admin.php?page=wp-postratings/postratings-options.php). Although access is limited to administrators and CSRF-pr...

WordPress plugin WP-PostRatings security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. The WordPress plugin WP-PostRatings...