Wp Postratings
Approved changes feed: RSS · Atom
cpe:2.3:a:lesterchan:wp-postratings:1.61:*:*:*:*:*:*:*
part: a version: 1.61 update: *
| Vendor | Lesterchan (be82ad8f-7653-558c-8a78-5dc1a50dbba3) |
|---|---|
| Product | Wp Postratings (e9e161de-577a-5b0e-b7e8-137643dbd635) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wp-plugins/wp-postratings |
purl2cpe | 2026-06-01 10:18:09.638799 |
pkg:github/wpplugins/wp-postratings |
purl2cpe | 2026-06-01 10:18:09.638801 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-4646 |
vulnerable | 2026-06-08 04:59:32.478778 |
Details available
SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50, 1.61, and probably other versions before 1.62 for WordPress allows remote authenticated users with the Author role to execute arbitrary SQL commands via the id attribute of the ratings shortcode when creating a post. NOTE: some of these details are obtained from third party information.
Published: 2011-11-30T19:00:00.000Z
Updated: 2024-09-16T23:51:44.485Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.