plugin

Thumbs Rating Vulnerabilities

2 known security issues reported for the Thumbs Rating WordPress plugin. Most recent disclosed Mar 29, 2024.

2 medium

Running Thumbs Rating on your site? Check whether your installed version is affected.

Scan your site free

Thumbs Rating <= 5.1.0 - Unauthenticated Insecure Direct Object Reference

medium

The Thumbs Rating plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.0 due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:
5.3
Affected:
up to 5.1.0
Fix:
No patched version reported
Disclosed:
Mar 29, 2024

CVE-2024-31095 on NVD →

Thumbs Rating <= 5.0.0 - Race Condition

medium

The Thumbs Rating plugin for WordPress is vulnerable to a race condition in versions up to, and including, 5.0.0. This is due to insufficient controls on resources being executed concurrently. The impact of this vulnerability is unknown, however, it may be possible to lose integrity of a post's votes if too many reques...

CVSS:
5.3
Affected:
up to 5.0.0
Fix:
No patched version reported
Disclosed:
Apr 28, 2023

CVE-2022-45809 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database