Medium · 5.3 CVE-2023-32127 EUVD-2023-36395GHSA-3c99-g4qv-p9wq

WordPress Multi Rating plugin <= 5.0.6 - Unauth Arbitrary rating value change

Published Apr 24, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Daniel Powney Product: Multi Rating

Description

Missing Authorization vulnerability in Daniel Powney Multi Rating allows Functionality Misuse.This issue affects Multi Rating: from n/a through 5.0.6.

Affected products

Vendor	Product	Affected	Fixed
Daniel Powney	Multi Rating	≤ 5.0.6	—

References

https://patchstack.com/database/vulnerability/multi-rating/wordpress-multi-rating-plugin-5-0-6-unauth-arbitrary-rating-value-change?_s_id=cve vdb-entry