kk Star Ratings – Rate Post & Collect User Feedbacks

kk Star Ratings – Rate Post & Collect User Feedbacks has 7 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 7 are fixed as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 7.3 out of 10. Severity breakdown: 0 critical and 1 high. 2023 was the busiest year with 4 disclosures.

The most common weakness is Missing Authorization, behind 3 of the records (43%). Other recurring categories include Code Injection, Cross-Site Scripting.

Every one of the 7 issues recorded for kk Star Ratings – Rate Post & Collect User Feedbacks has a vendor fix available, so running the current release closes all known holes.

6 independent researchers contributed these findings, one record each. kk Star Ratings – Rate Post & Collect User Feedbacks is installed on roughly 70,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

5.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all kk Star Ratings – Rate Post & Collect User Feedbacks vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.3CVE-2024-11977

kk Star Ratings – Rate Post & Collect User Feedbacks <= 5.4.10 - Unauthenticated Arbitrary Shortcode Execution

Read the full analysis

Vulnerability Records

7 records


2026-08-21 00:00	kk Star Ratings <= 5.4.10.3 - Unauthenticated Arbitrary Shortcode Execution via 'payload' Parameter kk Star Ratings <= 5.4.10.3	`CVE-2026-3424`	5.3 Medium	Ronnachai Sretawat Na Ayutaya (Simonhaskelly)	Yes
2024-12-20 16:25	kk Star Ratings – Rate Post & Collect User Feedbacks <= 5.4.10 - Unauthenticated Arbitrary Shortcode Execution kk Star Ratings <= 5.4.10	`CVE-2024-11977`	7.3 High	mikemyers	Yes
2023-11-06 00:00	kk Star Ratings <= 5.4.5 - Race Condition to Multiple User Voting kk Star Ratings <= 5.4.5	`CVE-2023-4642`	5.3 Medium	Mohammad Reza Omrani	Yes
2023-10-25 00:00	kk Star Ratings <= 5.4.5 - Missing Authorization kk Star Ratings <= 5.4.5	`CVE-2023-46639`	5.3 Medium	Revan Arifio	Yes
2023-07-18 00:00	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get kk Star Ratings 3.0.0 – 5.4.4	`CVE-2023-33999`	6.1 Medium	Rafie Muhammad	Yes
2023-07-17 00:00	kk Star Ratings <= 5.4.3 - IP Spoofing to Protection Mechanism Bypass kk Star Ratings <= 5.4.3	`CVE-2023-36528`	5.3 Medium	Kévin Mosbahi (Mika)	Yes
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks kk Star Ratings < 5.2.9	`CVE-2022-4974`	6.3 Medium	Anonymous	Yes

Showing 1–7 of 7 reports

Latestv5.4.10.5

kk Star Ratings – Rate Post & Collect User Feedbacks

$properfraction$

Author

properfraction

3.9(171)

78/100

Last Updated

2026-08-20 (24d ago)

Active Installs

70,000+

Downloads

2,273,346

Requires WP

5.0+

Requires PHP

7.4+

Tested up to

WP 7.1

Created

2011-05-28 (16y ago)

kk Star Ratings is a widely used star rating plugin for wordpress. Here are some highlighted features: User defined amount of star ratings (5 as default) in your posts, pages and publicly accesible custom post types. Structured data supporting google rich snippets showing the star ratings in search results which has the potential to drive more traffic to your website. Widespread coverage of custom hooks. Full control via options page. You can, Enable or disable globally. Disable star ratings in posts that belong to certain categories. Choose where to show the star ratings. It can be on the homepage, in archives, in posts, in pages and/or in custom post types. Control the structured data schema and type. Restrict votings per unique ip. Allow voting in archives. Allow guests to vote. Customize position within the post content. Adjust the amount of stars. And much more…

View on WordPress.org