Missing Authorization Vulnerability in FeedbackWP's kk Star Ratings Plugin
CVE-2023-46639

5.3MEDIUM

Key Information:

Vendor
WordPress
Status
Kk Star Ratings
Vendor
CVE Published:
2 January 2025

Summary

The FeedbackWP kk Star Ratings plugin contains a missing authorization vulnerability, which allows unauthorized users to exploit incorrectly configured access control security levels. This exploitation could lead to unauthorized access and manipulation of the plugin's functionality, affecting versions from n/a up to 5.4.5. It is critical for users and administrators to ensure that access control measures are correctly implemented to prevent potential risks associated with this vulnerability.

Affected Version(s)

kk Star Ratings <= 5.4.5

References

https://patchstack.com/database/wordpress/plugin/kk-star-...
vdb-entry

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Revan Arifio (Patchstack Alliance)
.