Stars Rating

Stars Rating has one disclosed vulnerability in the WordSec catalog, all reported in 2021; it is fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Uncontrolled Resource Consumption, behind 1 of the records (100%).

The one issue recorded for Stars Rating has a vendor fix available, so running the current release closes it.

All of these findings were reported by Drew Jones. Stars Rating is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSHigh
7.5/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Stars Rating vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.5CVE-2021-24893

Stars Rating <= 3.5.0 - Denial of Service

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Stars Rating banner
Latestv4.1.0

Stars Rating

Fahid Javid

Author

Fahid Javid

4.7(23)
94/100
Last Updated
2026-03-21 (6mo ago)
Active Installs
1,000+
Downloads
36,078
Requires WP
6.0+
Requires PHP
7.4+
Tested up to
WP 6.9.7
Created
2017-02-09 (10y ago)

Stars Rating transforms WordPress comments into a fully featured review system. It is simple to set up, highly configurable, and designed to keep your Media Library and admin clean no matter how many reviews come in. Its main features are as follows: Star Ratings * Turns posts, pages and custom post types comments into star-rated reviews. * Choose which post types have ratings enabled, globally and per post. * Option to require a star selection before a comment can be submitted. * Choose from two star styles (regular outline or solid filled) with a custom colour picker. * Display the average rating above the comments section. * Offers a shortcode [stars_rating_avg] to display the average rating anywhere. * Hide the average rating text: [stars_rating_avg show_text=”no”]. * Hide an empty average rating: [stars_rating_avg show_empty_rating=”no”]. * See each review’s star rating on the WordPress comments screen (backend). Review Photos * Allow reviewers to attach photos to their comments. * Photos are stored in a dedicated folder (wp-content/uploads/sr-reviews/) — completely separate from the WordPress Media Library to keep it clean. * Photos open in a per-review lightbox gallery on the front end. * Manage and delete individual review photos from the comment edit screen in the admin. * Configure max number of photos, max file size, and max image dimension per upload. * Restrict photo uploads to logged-in users or allow everyone. Likes & Dislikes * Add thumbs-up / thumbs-down buttons to posts on any post type. * Show or hide vote counts next to each button. * Restrict voting to logged-in users or allow everyone. * SVG icons ensure consistent rendering across all browsers and devices. Negative Rating Alert * Show a popup when a reviewer selects a low star rating, giving them a chance to reach out before posting. * Set the rating threshold that triggers the alert. * Configure a direct link to your contact page inside the alert. Google Rich Snippets * Output JSON-LD structured data so star ratings can appear directly in Google search results. * Set the review type (Product, Recipe, Book, Course, etc.) to match your content. Labels & Messages * Customise every user-facing string — prompts, button labels, alert text, error messages — directly from the settings page without editing any code. Settings * Organised settings page with tabbed navigation (Stars & Reviews, Likes & Dislikes, Labels & Messages) for quick access to each feature area.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C