WordPress Plugin Vulnerabilities

Rate my Post < 3.3.5 - Cross-Site Request Forgery

Description

The plugin does not have CSRF check in some places, which could allow attackers to make logged in users perform unwanted actions

Affects Plugins

Plugin icon
rate-my-post
Fixed in 3.3.5

References

CVE
CVE-2022-40671

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
4.3 (medium)

Miscellaneous

Original Researcher
Nguy Minh Tuan
Verified
No
WPVDB ID
cf975eef-4262-42af-9474-2a9cd5e34251

Timeline

Publicly Published
2022-09-14 (about 3 years ago)
Added
2022-09-24 (about 3 years ago)
Last Updated
2022-09-24 (about 3 years ago)

Other

Published
Title
Published
2025-03-28
Title
Ultimate Security Checker <= 4.2 - Cross-Site Request Forgery
Published
2023-04-28
Title
WP Directory Kit < 1.2.2 - Cross-Site Request Forgery to Plugin Settings Update
Published
2023-12-27
Title
Apollo13 Framework Extensions < 1.9.2 - Cross-Site Request Forgery
Published
2024-12-05
Title
WP System <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2025-09-26
Title
GST for WooCommerce <= 2.0 - Cross-Site Request Forgery