WordPress WP-PostRatings plugin Access Control Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An Access Control Error...

CVE-2023-40332

Improper Control of Interaction Frequency vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Functionality Misuse.This issue affects WP-PostRatings: from n/a through 1.91...

CVE-2023-40332 WordPress WP-PostRatings plugin <= 1.91 - Rating limit Bypass vulnerability

Improper Control of Interaction Frequency vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Functionality Misuse.This issue affects WP-PostRatings: from n/a through 1.91...

CVE-2023-40332 WordPress WP-PostRatings plugin <= 1.91 - Rating limit Bypass vulnerability

Improper Control of Interaction Frequency vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Functionality Misuse.This issue affects WP-PostRatings: from n/a through 1.91...

PT-2024-12885 · WordPress · Wp-Postratings

Name of the Vulnerable Software and Affected Versions: WP-PostRatings versions 1.91 and earlier Description: The issue is related to an Improper Control of Interaction Frequency vulnerability, allowing Functionality Misuse in WP-PostRatings. Recommendations: For WP-PostRatings versions 1.91 and...

WordPress plugin WP-PostRatings 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An Access Control Error...

CVE-2011-10006

A vulnerability was found in GamerZ WP-PostRatings up to 1.64. It has been classified as problematic. This affects an unknown part of the file wp-postratings.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.65 is able to...

CVE-2011-10006

GamerZ WP-PostRatings up to 1.64 contains a cross-site scripting (XSS) flaw in wp-postratings.php. The vulnerability, which can be triggered remotely, affects an unknown part of the file and can be exploited without user privileges, with user interaction required. The issue is mitigated by upgrad...

CVE-2011-10006 GamerZ WP-PostRatings wp-postratings.php cross site scripting

A vulnerability was found in GamerZ WP-PostRatings up to 1.64. It has been classified as problematic. This affects an unknown part of the file wp-postratings.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.65 is able to...

WP-PostRatings 跨站脚本漏洞

WP-PostRatings is a plugin for adding comment functionality. A cross-site scripting vulnerability exists in WP-PostRatings version 1.64 and earlier, which stems from the presence of a location section in wp-postratings.php that leads to cross-site scripting...

CVE-2021-25117 WP Postratings < 1.86.1 - Admin+ Stored Cross-Site Scripting

The WP-PostRatings WordPress plugin before 1.86.1 does not sanitise the postratingsimage parameter from its options page wp-admin/admin.php?page=wp-postratings/postratings-options.php. Even though the page is only accessible to administrators, and protected against CSRF attacks, the issue is stil...

WordPress WP-PostRatings Plugin <= 1.91 is vulnerable to Bypass Vulnerability

Software WP-PostRatings Type Plugin Vulnerable versions = 1.91 Fixed in 1.91.1 OWASP Top 10 A6: Security Misconfiguration Classification Bypass Vulnerability CVE CVE-2023-40332 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 4e97e26b5471 Credits Mika Required privilege...

Race condition

Rating increase/decrease via race condition in Lester 'GaMerZ' Chan WP-PostRatings plugin = 1.89 at WordPress...

CVE-2022-36422 WP-PostRatings plugin <= 1.89 - Rating increase/decrease via race condition

Rating increase/decrease via race condition in Lester 'GaMerZ' Chan WP-PostRatings plugin = 1.89 at WordPress...

CVE-2022-36422 WP-PostRatings plugin <= 1.89 - Rating increase/decrease via race condition

Rating increase/decrease via race condition in Lester 'GaMerZ' Chan WP-PostRatings plugin = 1.89 at WordPress...

PT-2022-23360 · Lester 'Gamerz' Chan · Wp-Postratings

Name of the Vulnerable Software and Affected Versions: Lester 'GaMerZ' Chan WP-PostRatings plugin version 1.89 and earlier Description: The issue is related to a race condition that allows rating increase or decrease in the WP-PostRatings plugin. Recommendations: For Lester 'GaMerZ' Chan...

WordPress WP-PostRatings plugin <= 1.89 - Rating Increase/Decrease via Race Condition vulnerability

Rating Increase/Decrease via Race Condition vulnerability discovered by Nguy Minh Tuan Patchstack Alliance in the WordPress WP-PostRatings plugin versions = 1.89. Solution Update the WordPress WP-PostRatings plugin to the latest available version at least 1.90...

WP-PostRatings < 1.90 - Ratings Tempering via Race Condition

The plugin is affected by a race condition allowing any authenticated user to tamper with ratings and decrease/increase their value...

WordPress WP-PostRatings Plugin Stored Cross Site Scripting

A stored cross site scripting vulnerability exists in WordPress WP-PostRatings Plugin. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system...

WordPress WP-PostRatings 1.86 Cross Site Scripting

Exploit Title: WordPress Plugin WP-PostRatings 1.86 - 'postratingsimage' Cross-Site Scripting Date: 20-12-2018 Software Link: https://wordpress.org/plugins/wp-postratings/ Exploit Author: Park Won Seok Version: wp-postratings.1.86 Tested on: Windows 10 x64 description: A Stored Cross-site scripti...