WP-PostRatings

WP-PostRatings has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2011 and 2024; all 5 are fixed as of October 2026. Their average CVSS score is 6.1, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Scripting, behind 2 of the records (40%). Other recurring categories include Race Condition, SQL Injection.

Every one of the 5 issues recorded for WP-PostRatings has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WP-PostRatings vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2011-4646

WP-PostRatings <= 1.61 - SQL Injection

Read the full analysis

Vulnerability Records

5 records


2024-08-01 00:00	WP-PostRatings <= 1.91.1 - Authenticated (Contributor+) Stored Cross-Site Scripting WP-PostRatings <= 1.91.1	`CVE-2024-39659`	6.4 Medium	stealthcopter	Yes
2023-08-16 00:00	WP-PostRatings <= 1.91 - IP Spoofing WP-PostRatings <= 1.91	`CVE-2023-40332`	5.3 Medium	Kévin Mosbahi (Mika)	Yes
2022-08-31 00:00	WP-PostRatings <= 1.89 - Race Condition WP-PostRatings <= 1.89	`CVE-2022-36422`	4.3 Medium	Nguy Minh Tuan	Yes
2020-12-24 00:00	WP-PostRatings <= 1.86 - Cross-Site Scripting WP-PostRatings <= 1.86	`CVE-2021-25117`	5.5 Medium	Park Won Seok	Yes
2011-10-06 00:00	WP-PostRatings <= 1.61 - SQL Injection WP-PostRatings <= 1.61	`CVE-2011-4646`	8.8 High	Anonymous	Yes

Showing 1–5 of 5 reports