CVE-2025-15157: Missing Authorization

The Starfish Review Generation & Marketing for WordPress plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'srmrestoreoptionsdefaults' function in all versions up to, and including, 3.1.19. This...

WordPress plugin Starfish Review Generation & Marketing 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

PT-2025-17175 · Unknown · Starfish Review Generation & Marketing

Name of the Vulnerable Software and Affected Versions: Starfish Review Generation & Marketing versions 3.1.14 and earlier Description: The issue is related to a Missing Authorization vulnerability that allows Privilege Escalation in Starfish Review Generation & Marketing. Recommendations: For...

CVE-2025-39533: Missing Authorization

Missing Authorization vulnerability in Starfish Reviews Starfish Review Generation & Marketing starfish-reviews allows Privilege Escalation.This issue affects Starfish Review Generation & Marketing: from n/a through = 3.1.19...

WordPress Starfish Review Generation & Marketing for WordPress plugin <= 3.0.25 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Starfish Review Generation & Marketing for WordPress plugin versions = 3.0.25. Solution Update the WordPress Starfish Review Generation & Marketing for WordPress plugin to the latest available version at least 3.0.26...