Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2025-06-17
CVE-2021-25117 - Wp Postratings Plugin
The WP-PostRatings WordPress plugin before 1.86.1 does not sanitise the postratings_image parameter from its options page (wp-admin/admin.php?page=wp-postratings/postratings-options.php). Even though the page is only accessible to administrators, and protected against CSRF attacks, the issue is still exploitable when the unfiltered_html capability is disabled.
PLUGIN
Wp Postratings
CVE-2021-25117
Risk Score
Threat Entry
Updated 2025-02-20
CVE-2022-36422 - Wp Postratings Plugin
Rating increase/decrease via race condition in Lester 'GaMerZ' Chan WP-PostRatings plugin
PLUGIN
Wp Postratings
CVE-2022-36422
Risk Score