plugin
7 known security issues reported for the Comment Rating WordPress plugin. Most recent disclosed Feb 27, 2013.
Running Comment Rating on your site? Check whether your installed version is affected.
Scan your site freeThis Comment Rating plugin is prone to multiple vulnerabilities such as comment rating SQL injection and BYPASS. Update the plugin.
The Comment Rating plugin for WordPress is vulnerable to generic SQL Injection via the 'ck_ips' parameter in versions up to, and including, 2.9.32 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attacke...
The Comment Rating plugin for WordPress is vulnerable to generic SQL Injection via the 'ck_ips' parameter in versions up to, and including, 2.9.32 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attacke...
WordPress Comment Rating plugin's "path" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based authentic...
There are several vulnerabilities in this plugin. First vulnerability type is path disclosure. The issue exists due to failure in the "/wp-content/plugins/comment-rating/comment-rating-options.php" script. There is possible to generate an error which will disclose the full path of the script. In this way an attacker...
The comment-rating WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability.
The comment-rating WordPress plugin was affected by a Security Bypass Weakness & SQL Injection security vulnerability.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free