VendorsYet Another Stars Rating Projectyet_another_stars_ratingall versions
Vulnerabilities

Yet Another Stars Rating Project Yet Another Stars Rating

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2015-9465
The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasr_get_multi_set_values_and_field SQL injection via the set_id parameter.
Published 2019-10-10 · Modified
8.8EPSS 0.019
CVE-2023-37867
WordPress Yet Another Stars Rating Plugin <= 3.3.8 is vulnerable to Race Condition
Published 2023-11-30 · Modified
8.1EPSS 0.004
CVE-2022-23980
WordPress Yasr – Yet Another Stars Rating plugin <= 2.9.9 - Cross-Site Scripting (XSS) vulnerability
Published 2022-02-04 · Modified
6.1EPSS 0.008