CVE-2021-25121

CVE-2021-25121 covers a vulnerability in the WordPress plugin Rating by BestWebSoft (pre-1.6). The issue arises because the plugin does not validate the submitted rating, allowing a long integer to be posted, which can cause a Denial of Service on the target post/page when the rating is submitted...

CVE-2017-18530

CVE-2017-18530 covers the WordPress rating-bws plugin prior to version 0.2, which contains multiple cross-site scripting (XSS) flaws. The core issue is insufficient validation of client-side data, enabling an attacker to execute arbitrary JavaScript in victims’ browsers (potentially stealing sess...