Description
Unauthenticated SQL Injection in GD Rating System <= 3.6.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dev4Press | GD Rating System | ≤ 3.6.2 | — |
Critical · 9.3
CVE-2026-42639
EUVD-2026-36815GHSA-3cvj-x7f9-wmv2
WordPress GD Rating System plugin <= 3.6.2 - SQL Injection vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack