WordPress Yet Another Stars Rating plugin <= 1.8.6 - PHP Object Injection vulnerability

PHP Object Injection vulnerability found by Paul Dannewitz in WordPress Yet Another Stars Rating plugin versions = 1.8.6. Solution Update the WordPress Yet Another Stars Rating plugin to the latest available version at least 1.8.7...

WordPress Yet Another Stars Rating Plugin <= 0.9.0 - Blind SQL Injection

Because of this vulnerability, remote authenticated users with 'publishposts' role can execute arbitrary SQL commands. Solution Update the plugin...

CVE-2014-2838

Multiple cross-site request forgery CSRF vulnerabilities in the GD Star Rating plugin 19.22 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct 1 SQL injection attacks via the s parameter in the gd-star-rating-stats page to...

CVE-2014-4601

Cross-site scripting XSS vulnerability in wu-ratepost.php in the Wu-Rating plugin 1.0 12319 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the v parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in wu-ratepost.php in the Wu-Rating plugin 1.0 12319 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the v parameter...

CVE-2014-4601

Cross-site scripting XSS vulnerability in wu-ratepost.php in the Wu-Rating plugin 1.0 12319 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the v parameter...

CVE-2014-4601

The CVE-2014-4601 vulnerability affects the Wu-Rating WordPress plugin (version 1.0 build 12319 and earlier). It is a reflected/Stored XSS due to improper handling of the v parameter in wu-ratepost.php, allowing remote attackers to inject arbitrary JavaScript/HTML. Impact is user session or page ...

WordPress Wu Rating Plugin <= 1.0 12319 - XSS

Because of this vulnerability in wu-ratepost.php, the attackers can inject arbitrary web script or HTML via the "v" parameter. Solution Update the plugin...

Wordpress Comment Rating Plugin 2.9.32 - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Wordpress plugin: Comment Rating SQL injection Google Dork: Date: 21/02/2013 Exploit Author: ebanyu Url Author: www.ebanyu.com.ar Vendor Homepage: wealthynetizen.com Software Link:...

Wordpress Comment Rating plugin Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Wordpress comment rating plugin multiple Vulnerabilities Google Dork: 1- inurl:"/wp-content/plugins/comment-rating/" 2- inurl:"/ck-processkarma.php?id=" Date: 2/1/2012 Author: The Evil Thinker Contact : email protected Software...

WordPress GD Star Rating Plugin 'votes' Parameter SQL Injection Vulnerability

WordPress GD Star Rating Plugin is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Comment Rating Plugin 2.9.23 - Multiple Vulnerabilities

There are several vulnerabilities in this plugin. First vulnerability type is path disclosure. The issue exists due to failure in the "/wp-content/plugins/comment-rating/comment-rating-options.php" script. There is possible to generate an error which will disclose the full path of the script. In...