CVE-2024-32823

Authorization Bypass Through User-Controlled Key vulnerability in FeedbackWP Rate my Post – WP Rating System.This issue affects Rate my Post – WP Rating System: from n/a through 3.4.4...

CVE-2024-32823

CVE-2024-32823 is an Authorization Bypass Through User-Controlled Key in the FeedbackWP Rate my Post – WP Rating System plugin, affecting Rate my Post plugin up to version 3.4.4. Public records (e.g., Red Hat CVE entry) confirm the root cause as authorization bypass. CVSS v3.1 base score is 5.3 (...

WordPress Rate my Post – WP Rating System Plugin <= 3.4.4 is vulnerable to Insecure Direct Object References (IDOR)

Software Rate my Post – WP Rating System Type Plugin Vulnerable versions = 3.4.4 Fixed in 3.4.5 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2024-32823 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 3390dc0a9f18...