Starbox Voting

Starbox Voting has one disclosed vulnerability in the WordSec catalog, all reported in 2011; it remains unpatched as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (100%).

The one issue recorded for Starbox Voting has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2011.

All of these findings were reported by High-Tech Bridge Security Research Lab. Starbox Voting is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 2.7.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Starbox Voting vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3

Starbox Voting <= 2.0.4 - Full Path Disclosure

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Plugin Profile
Latestv2.0.4

Starbox Voting

jigenhe

Author

jigenhe

0.0(0)
0/100
Last Updated
2009-05-05 (18y ago)
Active Installs
10+
Downloads
5,173
Requires WP
2.0+
Requires PHP
0+
Tested up to
WP 2.7
Created
2009-02-25 (18y ago)

This plugin adds voting functionality for posts. visitors can vote for the post and against. The Plugin HomePage on right is wrong , i’ sorry to that, and you can see how it works click Starbox Voting HomePage If you like this plugin , and translate it to other language , please let me know Change Log 1.1: Add plugins init setting , set display image as default image. 1.2: Repaire ajax Request ,no response . 1.3 Add so Style to choose In Setting > Starbox 1.4 You can set style by yourself In Setting > Starbox 1.5 Change error: no effect when change style in backend Add ghosing effect when mouse hover the stars Change Style Setting Page style. 1.6 Add Language Package 1.7 Rename every function . to avoid with other plugins 1.8 Compatible with Windows And Linux 2.0.2 Fix database create table only have &#8216;wp_’ prefix . 2.0.3 Clear code. 2.0.4 Fix Ie8 Bug:add this right after : Requirements A working WordPress install WordPress theme must contain a call to the get_header() function WordPress theme must contain the WordPress loop Most WordPress installs have these, so you need not worry about these. In addition, one must have JavaScript enabled in their browsers in order to vote. Customizing If the plugin cannot write to the database, you can try manually executing the below SQL queries (you can use phpMyAdmin to do this): CREATE TABLE `wp_starboxvoting` ( id int(11) NOT NULL auto_increment, object_id int(11) NOT NULL, ip varchar(64) character set latin1 NOT NULL, vote int(11) NOT NULL, PRIMARY KEY (`id`) ) ENGINE=MyISAM DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ;

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C