GD Rating System <= 3.6.2 - Unauthenticated SQL Injection
GD Rating System
Minimum safe version
3.7
Update to 3.7 or later to address 15 fixable vulnerabilities
CVE-2024-11198
CVE-2024-38709
CVE-2024-25093
WordPress GD Rating System Plugin <= 3.5.0 is vulnerable to Cross Site Scripting (XSS)
GD Rating System <= 3.5.0 - Unauthenticated Stored Cross-Site Scripting via IP
WordPress GD Rating System plugin 2.3 - Cross-Site Scripting (XSS) vulnerability (4)
WordPress GD Rating System plugin 2.3 - Directory Traversal vulnerability (4)
WordPress GD Rating System plugin 2.3 - Directory Traversal vulnerability (3)
WordPress GD Rating System plugin 2.3 - Directory Traversal vulnerability (2)
WordPress GD Rating System plugin 2.3 - Directory Traversal vulnerability
WordPress GD Rating System plugin 2.3 - Cross-Site Scripting (XSS) vulnerability (3)
WordPress GD Rating System plugin 2.3 - Cross-Site Scripting (XSS) vulnerability (2)
WordPress GD Rating System plugin 2.3 - Cross-Site Scripting (XSS) vulnerability
CVE-2017-18591