Skip to content
OpenAdvisories
Unscored CVE-2011-4646 EUVD-2011-4564GHSA-chv6-6f32-gc59

SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50, 1.61, and probably other versions before 1.62 for Word…

Published Nov 30, 2011 · Updated Sep 16, 2024 · Assigned by mitre

Description

SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50, 1.61, and probably other versions before 1.62 for WordPress allows remote authenticated users with the Author role to execute arbitrary SQL commands via the id attribute of the ratings shortcode when creating a post. NOTE: some of these details are obtained from third party information.

References