Build 5 Star Reviews on Google Reviews, Yelp, Facebook… easily and risk-free | RRatingg

Build 5 Star Reviews on Google Reviews, Yelp, Facebook… easily and risk-free | RRatingg has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2024; 4 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high. 2024 was the busiest year with 3 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (40%). Other recurring categories include SQL Injection, Cross-Site Scripting.

4 of the records (80%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2024.

5 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.8/ 10

Patch Coverage80%

Open

Fixed

Get automatic notifications for all Build 5 Star Reviews on Google Reviews, Yelp, Facebook… easily and risk-free | RRatingg vulnerabilities before they are exploited.

Most severe open issueCVSS 6.5CVE-2024-51579

5 Stars Rating Funnel <= 1.4.01 - Authenticated (Contributor+) SQL Injection

Read the full analysis

Vulnerability Records

5 records


2024-10-31 00:00	5 Stars Rating Funnel <= 1.4.01 - Authenticated (Contributor+) SQL Injection Build 5 Star Reviews on Google Reviews <= 1.4.01	`CVE-2024-51579`	6.5 Medium	Trương Hữu Phúc (truonghuuphuc)	No
2024-04-22 00:00	5 Stars Rating Funnel <= 1.2.67 - Missing Authorization Build 5 Star Reviews on Google Reviews <= 1.2.67	`CVE-2024-32725`	6.5 Medium	Dhabaleshwar Das	Yes
2024-04-08 00:00	5 star review funnel for Google Reviews, Trustpilot, ProvenExpert and more \| RRatingg <= 1.2.67 - Missing Authorization Build 5 Star Reviews on Google Reviews < 1.3.02	`CVE-2024-31358`	5.3 Medium	Emili Castells	Yes
2023-07-18 00:00	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Build 5 Star Reviews on Google Reviews <= 1.2.62	`CVE-2023-33999`	6.1 Medium	Rafie Muhammad	Yes
2022-04-13 00:00	5 Stars Rating Funnel <= 1.2.53 - Unauthenticated SQL Injection Build 5 Star Reviews on Google Reviews <= 1.2.53	`CVE-2022-0657`	9.8 Critical	cydave	Yes

Showing 1–5 of 5 reports