GD Rating System
GD Rating System has 14 disclosed vulnerabilities in the WordSec catalog, reported between 2017 and 2026; all 14 are fixed as of September 2026. Their average CVSS score is 6.9, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 6 high. 2018 was the busiest year with 8 disclosures.
The most common weakness is Cross-Site Scripting, behind 7 of the records (50%). Other recurring categories include Path Traversal, SQL Injection.
Every one of the 14 issues recorded for GD Rating System has a vendor fix available, so running the current release closes all known holes.
7 independent researchers contributed these findings, most of them (8) reported by d4wner. GD Rating System is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2024-38709GD Rating System <= 3.6 - Authenticated (Contributor+) Local File Inclusion
Read the full analysisVulnerability Records

GD Rating System
Author
Milan Petrovic
GD Rating System is the successor to GD Star Rating plugin, but it has nothing in common with the old plugin. GD Rating System uses a modular structure with most features split into addons and rating methods. For front end display plugin uses templates similar to WordPress theme templates and allows you to override existing templates or add new ones. Overview of plugin features With GD Rating System you can rate anything. The Plugin supports several basic rating entities, and for each one you can have more than one rating type. This includes posts with all default and custom post types, comments, users, terms for default or custom taxonomies. Here is the list of the most important plugin features: Rating Method: Stars Rating Rating Method: Like This (3.0) Addon: Shortcodes Builder (3.1) Addon: Rich Snippets Support Addon: Posts Integration Addon: Comments Integration Addon: Dynamic Load Addon: Feeds Support (v1.3) Widget: Rating block Widget: Rating list Shortcodes: Rating block and list Shortcodes: Rating values Shortcodes: Rating conditions Presentation: Default set of templates Posts Addon: Sort by rating (v1.2) Posts Addon: Auto sort by rating (v3.0) Comments Addon: Sort by rating (v1.2) Stars Rating: 20 icons in a font Stars Rating: 6 image-based sets Like This Rating: 2 font icons sets in a font Like This Rating: 1 image-based set Administration: Rating objects log Administration: Votes log Administration: Custom rating rules List Shortcodes and Widgets: additional object filters (v3.0) Data Transfer: Import from GD Star Rating Data Transfer: Import from WP PostRatings Data Transfer: Import from Yet Another Stars Rating Data Transfer: Import from KK Star Ratings (v1.3) Documentation and Support You need to register for a free account on Dev4Press: Frequently Asked Questions Knowledge Base Articles Support Forum: Free & Pro Translations English
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C