CVE-2023-4642
Assigner: WPScan
Published: 2023-11-27T16:21:58.631Z
State: PUBLISHED
title: kk Star Ratings < 5.4.6 - Rating Tampering via Race Condition
problemTypes: descriptions: description: CWE-362 Race Condition (Concurrent Execution using Shared Resource with Improper Synchronization)
type: CWE
affected: vendor: Unknown
product: kk Star Ratings
versions: status: affected
versionType: semver
version: 0
lessThan: 5.4.6
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
descriptions: value: The kk Star Ratings WordPress plugin before 5.4.6 does not implement atomic operations, allowing one user vote multiple times on a poll due to a Race Condition.
credits: value: Mohammad Reza Omrani
type: finder
value: WPScan
type: coordinator
source: discovery: EXTERNAL
x_generator: engine: WPScan CVE Generator