PT-2022-25343

Name of the Vulnerable Software and Affected Versions Rate my Post – WP Rating System plugin versions = 3.3.4 Description The issue allows attackers to manipulate votes by exploiting a race condition in the plugin. This can result in increased or decreased votes. Recommendations For Rate my Post ...

Cross-Site Request Forgery (CSRF) in erudika/scoold

✍️ Description The /voteup/question/ endpoint does not have a CSRF protection. This could be exploited by an attacker to manipulate votes in a question. 🕵️‍♂️ Proof of Concept An attacker creates the following web page and sends a link to a logged in user. // PoC.html Click Here When an...