Skip to content
OpenAdvisories
Unscored CVE-2023-4642 EUVD-2023-54494GHSA-hj52-659r-887v

kk Star Ratings < 5.4.6 - Rating Tampering via Race Condition

Published Nov 27, 2023 · Updated Aug 2, 2024 · Assigned by WPScan

Description

The kk Star Ratings WordPress plugin before 5.4.6 does not implement atomic operations, allowing one user vote multiple times on a poll due to a Race Condition.

Affected products

VendorProductAffectedFixed
— kk Star Ratings < 5.4.6 5.4.6

References