CVE-2023-4642

The kk Star Ratings WordPress plugin before 5.4.6 does not implement atomic operations, allowing one user vote multiple times on a poll due to a Race Condition.

CVSS v3.1

5.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.41% chance of exploitation in the next 30 days, 34th percentile

Published

2023-11-27

Updated

2024-08-02

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/6f481d34-6feb-4af2-914c-1f3288f69207

References

• CVE Record
• NVD entry

Related

• CVE-2023-46404
• CVE-2023-46426
• CVE-2023-46402
• CVE-2023-46427
• CVE-2023-46375
• CVE-2023-4643