cveboard RSS feed

CVE-2023-37867

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

WordPress Yet Another Stars Rating Plugin <= 3.3.8 is vulnerable to Race Condition

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in YetAnotherStarsRating.Com YASR – Yet Another Star Rating Plugin for WordPress.This issue affects YASR – Yet Another Star Rating Plugin for WordPress: from n/a through 3.3.8.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

YASR – Yet Another Star Rating Plugin for WordPress

Vendor
YetAnotherStarsRating.com
Product
YASR – Yet Another Star Rating Plugin for WordPress
Platforms
Unknown
Default status
unaffected
Package
yet-another-stars-rating
Package collection
https://wordpress.org/plugins
YASR – Yet Another Star Rating Plugin for WordPress · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
n/aaffectedcustomUnavailable3.3.8
  1. 3.3.9 → unaffected