Multi Rating

Multi Rating has 5 disclosed vulnerabilities in the WordSec catalog, all reported in 2023; 2 are fixed and 3 remain unpatched as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2023 was the busiest year with 5 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (40%). Other recurring categories include Cross-Site Scripting, Missing Authorization.

2 of the records (40%) have a vendor fix, while 3 remain unpatched. The oldest unresolved one dates back to 2023.

3 independent researchers contributed these findings, most of them (3) reported by yuyudhn.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage40%

Open

Fixed

Get automatic notifications for all Multi Rating vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2023-32127

Multi Rating <= 5.0.6 - Missing Authorization to Arbitrary Ratings Value Change

Read the full analysis

Vulnerability Records

5 records


2023-05-04 00:00	Multi Rating <= 5.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings Multi Rating <= 5.0.6	`CVE-2023-32130`	4.4 Medium	yuyudhn	No
2023-05-04 00:00	Multi Rating <= 5.0.6 - Cross-Site Request Forgery to Arbitrary Ratings Value Change Multi Rating <= 5.0.6	`CVE-2023-32125`	4.3 Medium	yuyudhn	No
2023-05-04 00:00	Multi Rating <= 5.0.6 - Missing Authorization to Arbitrary Ratings Value Change Multi Rating <= 5.0.6	`CVE-2023-32127`	5.3 Medium	yuyudhn	No
2023-02-14 00:00	Multi Rating <= 5.0.5 - Unauthenticated Stored Cross-Site Scripting Multi Rating <= 5.0.5	`CVE-2022-47433`	7.2 High	minhtuanact	Yes
2023-02-02 00:00	Multi Rating <= 5.0.5 - Cross Site Request Forgery Multi Rating <= 5.0.5	`CVE-2022-47443`	5.4 Medium	rezaduty	Yes

Showing 1–5 of 5 reports