plugin

Ajax Rating With Custom Login Vulnerabilities

2 known security issues reported for the Ajax Rating With Custom Login WordPress plugin. Most recent disclosed Oct 17, 2024.

1 high

Running Ajax Rating With Custom Login on your site? Check whether your installed version is affected.

Scan your site free

Ajax Rating with Custom Login [ajax-rating-with-custom-login] <= 1.1 (unfixed + closed)

unknown

[en] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in anand23 Ajax Rating with Custom Login allows SQL Injection.This issue affects Ajax Rating with Custom Login: from n/a through 1.1.

Affected:
up to 1.1
Fix:
No patched version reported
Disclosed:
Oct 17, 2024

CVE-2024-49246 on NVD →

Ajax Rating with Custom Login <= 1.1 - Unauthenticated SQL Injection

high

The Ajax Rating with Custom Login plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional...

CVSS:
7.5
Affected:
up to 1.1
Fix:
No patched version reported
Disclosed:
Oct 14, 2024

CVE-2024-49246 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database