CVE-2023-3998

The wpDiscuz plugin for WordPress is vulnerable to unauthorized modification of data due to a missing authorization check on the userRate function in versions up to, and including, 7.6.3. This makes it possible for unauthenticated attackers to increase or decrease the rating of a post...

CVE-2022-36422

Rating increase/decrease via race condition in Lester 'GaMerZ' Chan WP-PostRatings plugin = 1.89 at WordPress...

PT-2022-23360 · Lester 'Gamerz' Chan · Wp-Postratings

Name of the Vulnerable Software and Affected Versions: Lester 'GaMerZ' Chan WP-PostRatings plugin version 1.89 and earlier Description: The issue is related to a race condition that allows rating increase or decrease in the WP-PostRatings plugin. Recommendations: For Lester 'GaMerZ' Chan...