CVE-2021-24893

7.5 highEPSS 1.6%

High (7.5) in stars rating project stars rating. EPSS 1.6% chance of exploitation in the next 30 days.

The Stars Rating WordPress plugin before 3.5.1 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service in the comments section, or pending comment dashboard depending if the user sent it as unauthenticated or authenticated.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWEs: CWE-20, CWE-400
Published: 2022-01-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

stars_rating_project:stars_rating

References

https://wpscan.com/vulnerability/05d3af69-20b4-499a-8322-2b53674d6a58
https://wpscan.com/vulnerability/05d3af69-20b4-499a-8322-2b53674d6a58

Check your stack JSON