Thumbs Rating <= 5.1.0 - Unauthenticated Insecure Direct Object Reference

2024-04-0400:00:00

wpscan.com

wordpress

thumbs rating

insecure direct object reference

unauthorized action

unauthenticated

AI Score

6.8

Confidence

High

EPSS

Percentile

9.0%

JSON

Description The Thumbs Rating plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.0 due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to perform an unauthorized action.