PatchTheCVEgd rating system vulnerabilities and fixes
Recent CVEs affecting gd rating system, with upgrade or downgrade steps. 10 tracked.
Also searched as: gdratingsystem.
gd rating system has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-02-29. Highest priority: CVE-2018-5291 (score 59/100).
- CVE-2024-25093 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Pe
- CVE-2018-5293 MEDIUM 6.1 DOWNGRADE The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-ra
- CVE-2018-5292 MEDIUM 6.1 DOWNGRADE The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-ra
- CVE-2018-5291 HIGH 7.5 DOWNGRADE The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel paramete
- CVE-2018-5290 HIGH 7.5 DOWNGRADE The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel paramete
- CVE-2018-5289 HIGH 7.5 DOWNGRADE The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel paramete
- CVE-2018-5288 MEDIUM 6.1 DOWNGRADE The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-ra
- CVE-2018-5287 HIGH 7.5 DOWNGRADE The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel paramete
- CVE-2018-5286 MEDIUM 6.1 DOWNGRADE The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-ra
- CVE-2017-18591 MEDIUM 6.1 UPGRADE The gd-rating-system plugin before 2.1 for WordPress has XSS in log.php.
FAQ
How do I fix gd rating system vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gd rating system being exploited right now?
None of the tracked gd rating system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gd rating system CVE should I patch first?
CVE-2018-5291 currently ranks highest (59/100): The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel paramete.