WordPress plugin Stars Rating 输入验证错误漏洞

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress Stars Rating Plugin has a denial of service vulnerability in versions prior to 3.5.1, which stems from a failure ...

Kk Star Ratings 跨站脚本漏洞

kk-star-ratings is an application. Used to allow blog visitors to engage and interact with your site by rating posts. A cross-site scripting vulnerability exists in the Kk Star Ratings plugin prior to version 4.1.5...

WordPress Like Button Rating plugin <= 2.6.31 - Unauthenticated Server-Side Request Forgery (SSRF) vulnerability

Unauthenticated Server-Side Request Forgery SSRF vulnerability found by Lauritz Holme in WordPress Like Button Rating plugin versions = 2.6.31. Solution Update the WordPress Like Button Rating plugin to the latest available version at least 2.6.32...

WordPress yet-another-stars-rating plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. yet-another-stars-rating is a rating plugin used in it. The WordPress yet-another-stars-rating plugin suffers from a SQL injection...

WordPress Yet Another Stars Rating plugin <= 1.8.6 - PHP Object Injection vulnerability

PHP Object Injection vulnerability found by Paul Dannewitz in WordPress Yet Another Stars Rating plugin versions = 1.8.6. Solution Update the WordPress Yet Another Stars Rating plugin to the latest available version at least 1.8.7...

WordPress Yet Another Stars Rating Plugin <= 0.9.0 - Blind SQL Injection

Because of this vulnerability, remote authenticated users with 'publishposts' role can execute arbitrary SQL commands. Solution Update the plugin...

CVE-2014-2838

Multiple cross-site request forgery CSRF vulnerabilities in the GD Star Rating plugin 19.22 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct 1 SQL injection attacks via the s parameter in the gd-star-rating-stats page to...

CVE-2014-4601

Cross-site scripting XSS vulnerability in wu-ratepost.php in the Wu-Rating plugin 1.0 12319 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the v parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in wu-ratepost.php in the Wu-Rating plugin 1.0 12319 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the v parameter...

CVE-2014-4601

Cross-site scripting XSS vulnerability in wu-ratepost.php in the Wu-Rating plugin 1.0 12319 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the v parameter...

CVE-2014-4601

The CVE-2014-4601 vulnerability affects the Wu-Rating WordPress plugin (version 1.0 build 12319 and earlier). It is a reflected/Stored XSS due to improper handling of the v parameter in wu-ratepost.php, allowing remote attackers to inject arbitrary JavaScript/HTML. Impact is user session or page ...

WordPress Wu Rating Plugin <= 1.0 12319 - XSS

Because of this vulnerability in wu-ratepost.php, the attackers can inject arbitrary web script or HTML via the "v" parameter. Solution Update the plugin...

Wordpress Comment Rating Plugin 2.9.32 - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Wordpress plugin: Comment Rating SQL injection Google Dork: Date: 21/02/2013 Exploit Author: ebanyu Url Author: www.ebanyu.com.ar Vendor Homepage: wealthynetizen.com Software Link:...

Wordpress Comment Rating plugin Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Wordpress comment rating plugin multiple Vulnerabilities Google Dork: 1- inurl:"/wp-content/plugins/comment-rating/" 2- inurl:"/ck-processkarma.php?id=" Date: 2/1/2012 Author: The Evil Thinker Contact : email protected Software...

WordPress GD Star Rating Plugin 'votes' Parameter SQL Injection Vulnerability

WordPress GD Star Rating Plugin is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Comment Rating Plugin 2.9.23 - Multiple Vulnerabilities

There are several vulnerabilities in this plugin. First vulnerability type is path disclosure. The issue exists due to failure in the "/wp-content/plugins/comment-rating/comment-rating-options.php" script. There is possible to generate an error which will disclose the full path of the script. In...