WordPress plugin
Rate My Post – Star Rating Plugin by FeedbackWP security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 7 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium6
- Low0
All Rate My Post – Star Rating Plugin by FeedbackWP vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Unauthenticated Voting On Scheduled Posts ≤4.2.4Update to 4.2.5 | CVE-2024-12309 | |
| Medium5.3 | Insecure Direct Object Reference ≤3.4.4Update to 3.4.5 | CVE-2024-32823 | |
| Medium5.3 | IP Address Spoofing ≤3.4.2Update to 3.4.3 | CVE-2023-51667 | |
| Medium4.3 | WP Rating System <= 3.4.1 - Insecure Direct Object Reference <3.4.2Update to 3.4.2 | CVE-2023-49765 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ≤3.3.8Update to 3.3.9 | CVE-2022-4673 | |
| High8.8 | Cross-Site Request Forgery ≤3.3.4Update to 3.3.5 | CVE-2022-40671 | |
| Medium4.3 | Race Condition ≤3.3.4Update to 3.3.5 | CVE-2022-40310 |
- Medium5.3Unauthenticated Voting On Scheduled Posts
≤4.2.4Update to 4.2.5
- Medium5.3Insecure Direct Object Reference
≤3.4.4Update to 3.4.5
- Medium5.3IP Address Spoofing
≤3.4.2Update to 3.4.3
- Medium4.3WP Rating System <= 3.4.1 - Insecure Direct Object Reference
<3.4.2Update to 3.4.2
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
≤3.3.8Update to 3.3.9
- High8.8Cross-Site Request Forgery
≤3.3.4Update to 3.3.5
- Medium4.3Race Condition
≤3.3.4Update to 3.3.5
Rate My Post – Star Rating Plugin by FeedbackWP: common questions
Does Rate My Post – Star Rating Plugin by FeedbackWP have known vulnerabilities?
Yes. VulnCrest Radar lists 7 known vulnerabilities in Rate My Post – Star Rating Plugin by FeedbackWP: 1 high, 6 medium. None are known to affect version null.
How do I check which version of Rate My Post – Star Rating Plugin by FeedbackWP I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Rate My Post – Star Rating Plugin by FeedbackWP vulnerability?
CVE-2024-12309, published Dec 12, 2024: Rate My Post – Star Rating Plugin by FeedbackWP <= 4.2.4 - Unauthenticated Voting On Scheduled Posts. Severity: Medium (CVSS 5.3).
Is any Rate My Post – Star Rating Plugin by FeedbackWP vulnerability listed in CISA KEV?
No. None of the known Rate My Post – Star Rating Plugin by FeedbackWP vulnerabilities is currently listed in the CISA KEV catalog.