Plugin icon

YASR – Yet Another Star Rating Plugin for WordPress

yet-another-stars-rating

Vulnerabilities:

7

Last Updated:

April 10, 2025

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2023-11-27
Title
Yet Another Stars Rating < 3.4.4 - Missing Authorization via init
Fixed in
Fixed in 3.4.4
CVSS
5.3 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.4.2
CVSS
6.1 (medium)
Published
2023-03-03
Title
Yet Another Stars Rating < 3.1.3 - Subscriber+ Stored XSS
Fixed in
Fixed in 3.1.3
CVSS
8.0 (high)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 3.0.2
CVSS
4.3 (medium)
Published
2022-02-03
Title
Yet Another Stars Rating < 3.0.0 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.0.0
CVSS
6.1 (medium)
Published
2019-01-27
Title
Yet Another Stars Rating <= 1.8.6 - PHP Object Injection
Fixed in
Fixed in 1.8.7
CVSS
n/a
Published
2015-07-06
Title
Yet Another Stars Rating <= 0.9.0 - Authenticated Blind SQL Injection
Fixed in
Fixed in 0.9.1
CVSS
8.8 (high)