← WordPress Vulnerabilities
WordPress security by component

5 Stars Rating Funnel

5 Stars Rating Funnel is a WordPress component with 4 published CVE records in this archive. The latest tracked vulnerability was published Nov 09, 2024; the highest CVE/CNA score is 9.8.

Plugin slug: 5-stars-rating-funnel

CVE-2024-51579: 5 Stars Rating Funnel: SQL injection

5 Stars Rating Funnel is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedNov 09, 2024
Safe version guidanceSee mitigation notes
Safe version
Nov 09, 2024 CVE-2024-51579
5 Stars Rating Funnel: SQL injection
5 Stars Rating Funnel is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE8.5
NVDPending
Jun 09, 2024 CVE-2024-32725
5 Stars Rating Funnel: A security weakness
5 Stars Rating Funnel is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3
NVDPending
Apr 10, 2024 CVE-2024-31358
5 Stars Rating Funnel: A security weakness
5 Stars Rating Funnel is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE7.5
NVDPending
Apr 25, 2022 CVE-2022-0657
5 Stars Rating Funnel: SQL injection
5 Stars Rating Funnel is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE9.8
NVD9.8