Lesterchan Wp-postratings — known CVE vulnerabilities

Every CVE whose affected-product data names Lesterchan Wp-postratings, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2024-39659 — CVSS 6.5 (medium): Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Lester ‘GaMerZ’ Chan…
• CVE-2011-4646 — CVSS 6.0 (medium): SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50, 1.61, and probably other versions before 1.62 for…
• CVE-2023-40332 — CVSS 5.3 (medium): Improper Control of Interaction Frequency vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Functionality Misuse.This issue…
• CVE-2021-25117 — CVSS 4.8 (medium): The WP-PostRatings WordPress plugin before 1.86.1 does not sanitise the postratings_image parameter from its options page…
• CVE-2011-10006 — CVSS 3.5 (low): A vulnerability was found in GamerZ WP-PostRatings up to 1.64. It has been classified as problematic. This affects an unknown part of the…