Skip to content
OpenAdvisories
High · 8.5 CVE-2026-57771 EUVD-2026-43391GHSA-m8r3-8cmr-c7h4

WordPress GD Rating System plugin <= 3.7 - SQL Injection vulnerability

Published Jul 13, 2026 · Updated Jul 13, 2026 · Assigned by Patchstack

Vendor: Milan Petrovic Product: GD Rating System

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Milan Petrovic GD Rating System gd-rating-system allows Blind SQL Injection.This issue affects GD Rating System: from n/a through <= 3.7.

Affected products

VendorProductAffectedFixed
Milan Petrovic GD Rating System ≤ 3.7 —

References