VideoWhisper Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings

• CVE-2026-4301 Medium 4.3 Rate Star Review Vote <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'rating_id' Parameter 0.3%
• CVE-2024-13392 Medium 6.4 Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%