Search vulnerabilities

Results 3

Export CSV
CVE-2023-37867

WordPress Yet Another Stars Rating Plugin <= 3.3.8 is vulnerable to Race Condition

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in YetAnotherStarsRating.Com YASR – Yet Another Star Rating Plugin for WordPress.This issue affects YASR – Yet Another Star Rating Plugin for WordPress: from n/a through 3.3.8.

CVSS 3.1 · 3.7 Low EPSS < 1% KEV · Not listed
CVE-2022-23980

WordPress Yasr – Yet Another Stars Rating plugin <= 2.9.9 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting (XSS) vulnerability discovered in Yasr – Yet Another Stars Rating WordPress plugin (versions <= 2.9.9), vulnerable at parameter 'source'.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed