Skip to content
OpenAdvisories
Medium · 5.4 CVE-2021-36861 EUVD-2021-23437GHSA-qhrr-x64j-85vg

WordPress Rich Reviews by Starfish plugin <= 1.9.14 - Cross-Site Request Forgery (CSRF) vulnerability

Published Aug 5, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Starfish Reviews Product: Rich Reviews by Starfish (WordPress plugin) Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in Rich Reviews by Starfish plugin <= 1.9.14 at WordPress allows an attacker to delete reviews.

Affected products

VendorProductAffectedFixed
Starfish Reviews Rich Reviews by Starfish (WordPress plugin) <= 1.9.14 – ≤ 1.9.14 —

References