GCVE - cpe:2.3:a:lesterchan:wp-postratings:*:*:*:*:*:wordpress:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:lesterchan:wp-postratings:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Lesterchan (`be82ad8f-7653-558c-8a78-5dc1a50dbba3`)
Product	Wp Postratings (`e9e161de-577a-5b0e-b7e8-137643dbd635`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/wp-plugins/wp-postratings`	purl2cpe	2026-06-01 10:18:09.647296
`pkg:github/wpplugins/wp-postratings`	purl2cpe	2026-06-01 10:18:09.647298

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-39659`	vulnerable	2026-06-08 06:41:51.298467	WordPress WP-PostRatings plugin <= 1.91.1 - Cross Site Scripting (XSS) vulnerability MEDIUM (6.5) Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Stored XSS.This issue affects WP-PostRatings: from n/a through 1.91.1. Published: 2024-08-01T21:45:10.909Z Updated: 2026-04-28T16:10:08.258Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/wp-postratings/wordpress-wp-postratings-plugin-1-91-1-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-40332`	vulnerable	2026-06-08 06:09:42.084409	WordPress WP-PostRatings plugin <= 1.91 - Rating limit Bypass vulnerability MEDIUM (5.3) Improper Control of Interaction Frequency vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Functionality Misuse.This issue affects WP-PostRatings: from n/a through 1.91. Published: 2024-06-04T07:18:30.124Z Updated: 2026-04-28T16:08:36.541Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/wp-postratings/wordpress-wp-postratings-plugin-1-91-rating-limit-bypass-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-25117`	vulnerable	2026-06-08 05:30:39.996698	WP Postratings < 1.86.1 - Admin+ Stored Cross-Site Scripting The WP-PostRatings WordPress plugin before 1.86.1 does not sanitise the postratings_image parameter from its options page (wp-admin/admin.php?page=wp-postratings/postratings-options.php). Even though the page is only accessible to administrators, and protected against CSRF attacks, the issue is still exploitable when the unfiltered_html capability is disabled. Published: 2024-01-16T15:49:22.142Z Updated: 2025-06-17T14:09:11.308Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/d2d9a789-edae-4ae1-92af-e6132db7efcd/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-10006`	vulnerable	2026-06-08 04:56:40.574659	GamerZ WP-PostRatings wp-postratings.php cross site scripting LOW (3.5) A vulnerability was found in GamerZ WP-PostRatings up to 1.64. It has been classified as problematic. This affects an unknown part of the file wp-postratings.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.65 is able to address this issue. The identifier of the patch is 6182a5682b12369ced0becd3b505439ce2eb8132. It is recommended to upgrade the affected component. The identifier VDB-259629 was assigned to this vulnerability. Published: 2024-04-08T13:00:05.786Z Updated: 2024-08-07T00:30:46.944Z Open on db.gcve.eu Reference links https://vuldb.com/?id.259629 https://vuldb.com/?ctiid.259629 https://github.com/wp-plugins/wp-postratings/commit/dcc68d03693152eba14d6fb33ba42528ff60e06a https://github.com/wp-plugins/wp-postratings/commit/6182a5682b12369ced0becd3b505439ce2eb8132 https://github.com/wp-plugins/wp-postratings/releases/tag/1.65	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.