plugin
5 known security issues reported for the Multi Rating WordPress plugin. Most recent disclosed May 4, 2023.
Running Multi Rating on your site? Check whether your installed version is affected.
Scan your site freeThe Multi Rating plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mr_edit_rating function in versions up to, and including, 5.0.6. This makes it possible for unauthenticated attackers to modify arbitrary ratings.
The Multi Rating plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in versions up to, and including, 5.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrar...
The Multi Rating plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.0.6. This is due to missing or incorrect nonce validation on the mr_edit_rating function. This makes it possible for unauthenticated attackers to modify arbitrary ratings via a forged request granted th...
The Multi Rating plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'from-date', 'to-date', and 'post-id' parameters in versions up to, and including, 5.0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts...
The Multi Rating for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.0.5. This is due to missing nonce validation on several functions like mr_clear_database, mr_clear_cache, and mr_export_rating_results. This makes it possible for unauthenticated attackers to clear the cache a...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free