CVE-2021-36861

CVE-2021-36861 affects WordPress Rich Reviews by Starfish plugin versions <= 1.9.14. The issue is a Cross-Site Request Forgery (CSRF) that can let an attacker delete reviews. Concrete exploitation details are not provided in the documents; there is no explicit mention of in‑the‑wild exploits. ...

CVE-2021-24753

CVE-2021-24753 affects the WordPress plugin Rich Reviews by Starfish (before 1.9.6). The issue is an authenticated SQL injection on the pending reviews page caused by improper validation of the orderby GET parameter before it is used in a SQL statement. Impact described as authenticated access wi...

CVE-2019-25216

The Rich Review plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 1.7.4 . The root cause is insufficient input sanitization and output escaping of the 'update' parameter within the POST body. This flaw allows unauthenticated attackers to injec...