CVE-2025-30572

Cross-Site Request Forgery CSRF vulnerability in Igor Yavych Simple Rating simple-rating allows Stored XSS.This issue affects Simple Rating: from n/a through = 1.4...

CVE-2025-30572

CVE-2025-30572 affects WordPress plugin Simple Rating (Igor Yavych). The issue is a CSRF that enables Stored XSS in the plugin. The CVSS 3.1 base metrics indicate a High risk (7.1) with Network access, Low confidentiality/integrity/availability impacts, and user interaction required. Affected ver...

PT-2025-12617

Name of the Vulnerable Software and Affected Versions Igor Yavych Simple Rating versions n/a through 1.4 Description The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application...