Medium 6.1
2026-05-01< 1.2.57
CVE-2024-13362
Minimum safe version
1.2.57
Update to 1.2.57 or later to address 6 fixable vulnerabilities
CVE-2024-13362
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Five-Star Ratings Shortcode Plugin < 1.2.48 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Five-Star Ratings Shortcode plugin < 1.2.39 - Sensitive Information Disclosure vulnerability
WordPress Five-Star Ratings Shortcode plugin < 1.2.39 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability