WordPress WP-PostRatings Plugin <= 1.91 is vulnerable to Bypass Vulnerability

Software WP-PostRatings Type Plugin Vulnerable versions = 1.91 Fixed in 1.91.1 OWASP Top 10 A6: Security Misconfiguration Classification Bypass Vulnerability CVE CVE-2023-40332 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 4e97e26b5471 Credits Mika Required privilege...

Race condition

Rating increase/decrease via race condition in Lester 'GaMerZ' Chan WP-PostRatings plugin = 1.89 at WordPress...

CVE-2022-36422 WP-PostRatings plugin <= 1.89 - Rating increase/decrease via race condition

Rating increase/decrease via race condition in Lester 'GaMerZ' Chan WP-PostRatings plugin = 1.89 at WordPress...

CVE-2022-36422 WP-PostRatings plugin <= 1.89 - Rating increase/decrease via race condition

Rating increase/decrease via race condition in Lester 'GaMerZ' Chan WP-PostRatings plugin = 1.89 at WordPress...

WordPress plugin WP-PostRatings 竞争条件问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A vulnerability exists in t...

PT-2022-23360 · Lester 'Gamerz' Chan · Wp-Postratings

Name of the Vulnerable Software and Affected Versions: Lester 'GaMerZ' Chan WP-PostRatings plugin version 1.89 and earlier Description: The issue is related to a race condition that allows rating increase or decrease in the WP-PostRatings plugin. Recommendations: For Lester 'GaMerZ' Chan...

WP-PostRatings < 1.90 - Ratings Tempering via Race Condition

The plugin is affected by a race condition allowing any authenticated user to tamper with ratings and decrease/increase their value...

WordPress WP-PostRatings plugin <= 1.89 - Rating Increase/Decrease via Race Condition vulnerability

Rating Increase/Decrease via Race Condition vulnerability discovered by Nguy Minh Tuan Patchstack Alliance in the WordPress WP-PostRatings plugin versions = 1.89. Solution Update the WordPress WP-PostRatings plugin to the latest available version at least 1.90...

WordPress WP-PostRatings Plugin Stored Cross Site Scripting

A stored cross site scripting vulnerability exists in WordPress WP-PostRatings Plugin. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system...

WordPress WP-PostRatings 1.86 Cross Site Scripting

Exploit Title: WordPress Plugin WP-PostRatings 1.86 - 'postratingsimage' Cross-Site Scripting Date: 20-12-2018 Software Link: https://wordpress.org/plugins/wp-postratings/ Exploit Author: Park Won Seok Version: wp-postratings.1.86 Tested on: Windows 10 x64 description: A Stored Cross-site scripti...

WP Postratings < 1.86.1 - Authenticated Stored Cross-Site Scripting

The plugin does not sanitise the postratingsimage parameter from its options page wp-admin/admin.php?page=wp-postratings/postratings-options.php. Even though the page is only accessible to administrators, and protected against CSRF attacks, the issue is still exploitable when the unfilteredhtml...

WordPress WP-PostRatings plugin <= 1.86 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability found by Park Won Seok in WordPress WP-PostRatings plugin versions = 1.86. Solution Update the WordPress WP-PostRatings plugin to the latest available version at least 1.86.1...

WordPress Plugin WP-PostRatings 1.86 - 'postratings_image' Cross-Site Scripting

Exploit Title: WordPress Plugin WP-PostRatings 1.86 - 'postratingsimage' Cross-Site Scripting Date: 20-12-2018 Software Link: https://wordpress.org/plugins/wp-postratings/ Exploit Author: Park Won Seok Version: wp-postratings.1.86 Tested on: Windows 10 x64 description: A Stored Cross-site scripti...

WordPress Fastest Cache 0.8.9.0 Arbitrary File Deletion Exploit

WordPress WP Fastest Cache plugin versions 0.8.9.0 and below suffer from an arbitrary file deletion vulnerability. The wordpress plugin "WP Fastest Cache" 0 suffered from an arbitrary file deletion bug. Description A successful attack allows an unauthenticated attacker to specify a path to a...

CVE-2011-4646

SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50, 1.61, and probably other versions before 1.62 for WordPress allows remote authenticated users with the Author role to execute arbitrary SQL commands via the id attribute of the ratings shortcode when creating a...

Sql injection

SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50, 1.61, and probably other versions before 1.62 for WordPress allows remote authenticated users with the Author role to execute arbitrary SQL commands via the id attribute of the ratings shortcode when creating a...

CVE-2011-4646

SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50, 1.61, and probably other versions before 1.62 for WordPress allows remote authenticated users with the Author role to execute arbitrary SQL commands via the id attribute of the ratings shortcode when creating a...

CVE-2011-4646

CVE-2011-4646 affects the WP-PostRatings WordPress plugin (versions 1.50, 1.61 and likely earlier than 1.62). The vulnerability is a SQL injection in wp-postratings.php that allows remote authenticated users with the Author role to execute arbitrary SQL commands via the id attribute of the rating...

WP Postratings < 1.62 - Authenticated SQL Injection

The WP-PostRatings WordPress plugin was affected by a SQL Injection security vulnerability allowing authenticated users author+ to execute SQL commands via the id attribute of the ratings shortcode when creating a post...