Vulnerability · Published Nov 30, 2023 · Assigned by Patchstack
CVE-2023-37867WordPress Yet Another Stars Rating Plugin <= 3.3.8 is vulnerable to Race Condition
Low 3.7
In plain English
A low-severity security flaw in YASR – Yet Another Star Rating Plugin for WordPress from YetAnotherStarsRating.com. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).
Severity (CVSS 3.1)3.7Low
Exploit odds (30 days)0.4%top 65.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in YetAnotherStarsRating.Com YASR – Yet Another Star Rating Plugin for WordPress.This issue affects YASR – Yet Another Star Rating Plugin for WordPress: from n/a through 3.3.8.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| YetAnotherStarsRating.com | YASR – Yet Another Star Rating Plugin for WordPress | n/a – through 3.3.8 |
Weakness: CWE-367 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N