Rating Bws Vulnerabilities

The Rating by BestWebSoft plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.7 via deserialization of untrusted input. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject a PHP Object. No known POP chain is present in the vuln...

CVSS:

8.8

Affected:

up to 1.7

Fix:

No patched version reported

Disclosed:

Apr 17, 2025

CVE-2025-39527 on NVD →

The Rating by BestWebSoft WordPress plugin through 1.5 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service on the post/page when a user submit such rating

CVSS:

5.3

Affected:

up to 1.5

Fixed in:

1.6

Disclosed:

May 24, 2022

CVE-2021-25121 on NVD →

The Rating by BestWebSoft plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to 0.2 due to insufficient input sanitization and output escaping on the 'category' parameter. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute in a victim's bro...

CVSS:

6.1

Affected:

up to 0.2

Fixed in:

0.2

Disclosed:

Apr 17, 2017

CVE-2017-18530 on NVD →