Authenticated (subscriber+) Race Condition vulnerability in Rate my Post – WP Rating System plugin <= 3.3.4 at WordPress allows attackers to increase/decrease votes.
References
| Link | Resource |
|---|---|
| https://patchstack.com/database/vulnerability/rate-my-post/wordpress-rate-my-post-wp-rating-system-plugin-3-3-4-race-condition-vulnerability/_s_id=cve | Broken Link Third Party Advisory |
| https://wordpress.org/plugins/rate-my-post/#developers | Product Release Notes |
Configurations
History
26 Sep 2022, 16:36
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 3.1 |
| CPE | cpe:2.3:a:blazzdev:rate_my_post_-_wp_rating_system:*:*:*:*:*:wordpress:*:* | |
| CWE | CWE-362 | |
| References | (CONFIRM) https://patchstack.com/database/vulnerability/rate-my-post/wordpress-rate-my-post-wp-rating-system-plugin-3-3-4-race-condition-vulnerability/_s_id=cve - Broken Link, Third Party Advisory | |
| References | (CONFIRM) https://wordpress.org/plugins/rate-my-post/#developers - Product, Release Notes | |
| First Time |
Blazzdev rate My Post - Wp Rating System
Blazzdev |
23 Sep 2022, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-09-23 15:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-40310
Mitre link : CVE-2022-40310
CVE.ORG link : CVE-2022-40310
JSON object : View
Products Affected
blazzdev
- rate_my_post_-_wp_rating_system
CWE
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')