Yet Another Stars Rating Project

yet_another_stars_rating_project

3 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Yet Another Stars Rating

yet_another_stars_rating

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-37867 1Yet Another Stars Rating Project 1Yet Another Stars Rating Jun 17, 2026 Nov 30, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in YetAnotherStarsRating.Com YASR – Yet Another Star Rating Plugin for WordPress.This issue affects YASR – Yet Another Star Rating Plugin for WordPress: fro...Show more Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in YetAnotherStarsRating.Com YASR – Yet Another Star Rating Plugin for WordPress.This issue affects YASR – Yet Another Star Rating Plugin for WordPress: from n/a through 3.3.8.Show less
CVE-2022-23980 1Yet Another Stars Rating Project 1Yet Another Stars Rating Jun 17, 2026 Feb 4, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-Site Scripting (XSS) vulnerability discovered in Yasr – Yet Another Stars Rating WordPress plugin (versions <= 2.9.9), vulnerable at parameter 'source'.
CVE-2015-9465 1Yet Another Stars Rating Project 1Yet Another Stars Rating Nov 21, 2024 Oct 10, 2019 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasr_get_multi_set_values_and_field SQL injection via the set_id parameter.