Medium · 4.3 CVE-2022-40310 EUVD-2022-43605GHSA-wgh8-h75r-c4qw

WordPress Rate my Post – WP Rating System plugin <= 3.3.4 - Race Condition vulnerability

Published Sep 23, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Blaz K. Product: Rate my Post – WP Rating System (WordPress plugin) Category: Web / CMS

Description

Authenticated (subscriber+) Race Condition vulnerability in Rate my Post – WP Rating System plugin <= 3.3.4 at WordPress allows attackers to increase/decrease votes.

Affected products

Vendor	Product	Affected	Fixed
Blaz K.	Rate my Post – WP Rating System (WordPress plugin)	<= 3.3.4 – ≤ 3.3.4	—

References

https://wordpress.org/plugins/rate-my-post/#developers
https://patchstack.com/database/vulnerability/rate-my-post/wordpress-rate-my-post-wp-rating-system-plugin-3-3-4-race-condition-vulnerability/_s_id=cve