CVE-2021-36861

CVE-2021-36861 affects WordPress Rich Reviews by Starfish plugin versions <= 1.9.14. The issue is a Cross-Site Request Forgery (CSRF) that can let an attacker delete reviews. Concrete exploitation details are not provided in the documents; there is no explicit mention of in‑the‑wild exploits. ...

CVE-2021-24753

CVE-2021-24753 affects the WordPress plugin Rich Reviews by Starfish (before 1.9.6). The issue is an authenticated SQL injection on the pending reviews page caused by improper validation of the orderby GET parameter before it is used in a SQL statement. Impact described as authenticated access wi...

CVE-2019-25216

The CVE-2019-25216 entry concerns the WordPress Rich Review plugin. A Stored Cross-Site Scripting vulnerability exists in versions up to and including 1.7.4 due to insufficient input sanitization and output escaping in the POST body parameter update. This allows unauthenticated attackers to injec...