Skip to content
OpenAdvisories

Vendor

starfishwp

2 known vulnerabilities.

Products

Rich Reviews by Starfish 1 Starfish Review Generation & Marketing for WordPress 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2025-15157

    Starfish Review Generation & Marketing for WordPress <= 3.1.19 - Authenticated (Subscriber+) Arbitrary Options Update via srm_restore_options_defaults

    The Starfish Review Generation & Marketing for WordPress plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'srm_restore_options_defaults' function in all vers…

    starfishwp Starfish Review Generation & Marketing for WordPress Web / CMS
  • High 7.2
    CVE-2019-25216

    Rich Reviews <= 1.7.4 - Stored Cross-Site Scripting

    The Rich Review plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the POST body 'update' parameter in versions up to, and including, 1.7.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticat…

    starfishwp Rich Reviews by Starfish Web / CMS