CVE-2011-4646

WP-PostRatings < 1.62 - Authenticated SQL Injection via Ratings Shortcode

Title source: llm

Description

SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50, 1.61, and probably other versions before 1.62 for WordPress allows remote authenticated users with the Author role to execute arbitrary SQL commands via the id attribute of the ratings shortcode when creating a post. NOTE: some of these details are obtained from third party information.

References (4)

Core 4

Core References

Exploit, Patch x_refsource_confirm

http://plugins.trac.wordpress.org/changeset/430970/wp-postratings/trunk/wp-postratings.php?old=355076&old_path=wp-postratings%2Ftrunk%2Fwp-postratings.php

Product x_refsource_confirm

http://wordpress.org/extend/plugins/wp-postratings/changelog/

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/46328

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/49986

Scores

EPSS 0.0163

EPSS Percentile 73.3%

Details

CWE

CWE-94

Status published

Products (2)

lesterchan/wp-postratings 1.50

lesterchan/wp-postratings 1.61

Published Nov 30, 2011

Tracked Since Feb 18, 2026