CVE-2026-9619

CVE-2026-9619 affects the Reviews and Rating – Docplanner WordPress plugin, vulnerable in all versions up to 1.1.4 due to insufficient authorization checks for an action (sync_reviews AJAX). This allows authenticated users with subscriber-level access and above to trigger outbound scraping, write...

CVE-2026-9619 Reviews and Rating <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via sync_reviews AJAX Action

The Reviews and Rating – Docplanner plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

WordPress Reviews and Rating – Docplanner plugin <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Modification vulnerability discovered by Benedictus Jovan aillesiM in WordPress Plugin Reviews and Rating – Docplanner versions = 1.1.4...

PT-2024-12016 · Google · Google My Business

Name of the Vulnerable Software and Affected Versions: Reviews and Rating – Google My Business versions n/a through 4.14 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This problem can be...

WordPress plugin Reviews and Rating 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Reviews and Rating – Google Reviews plugin <= 5.2 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by wesley wcraft in WordPress Plugin Reviews and Rating – Google My Business versions = 5.2...

WordPress Reviews and Rating – Google My Business Plugin <= 5.2 is vulnerable to Cross Site Scripting (XSS)

Software Reviews and Rating – Google My Business Type Plugin Vulnerable versions = 5.2 Fixed in 5.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5218 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID e783e142cbef Credits wesl...

PT-2024-35130 · WordPress · The Reviews/Rating – Google Reviews

Name of the Vulnerable Software and Affected Versions: The Reviews and Rating – Google Reviews plugin for WordPress versions up to, and including, 5.2 Description: The issue is related to Stored Cross-Site Scripting via the plugin's file upload feature due to insufficient input sanitization and...

WordPress plugin Reviews and Rating – Google Reviews 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Reviews and...

WordPress Reviews and Rating – Google My Business Plugin <= 4.14 is vulnerable to Broken Access Control

Software Reviews and Rating – Google My Business Type Plugin Vulnerable versions = 4.14 Fixed in 4.15 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-23986 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 7be60ef76311 Credits István...