PT-2024-12794
CVE-2023-39305
·
Published
2024-12-13
·
Updated
2024-12-17
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Yet Another Stars Rating versions 3.4.3 and below
Description
The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels due to broken access control. This can be exploited in the Yet Another Stars Rating plugin for WordPress.
Recommendations
Update to the latest version to secure your site and protect against this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾