CVE-2023-36528: WordPress kk Star Ratings plugin <= 5.4.3 - Rate Manipulation due to IP Spoofing Vulnerability
5.3
CVSS
Description
Missing Authorization vulnerability in FeedbackWP kk Star Ratings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects kk Star Ratings: from n/a through 5.4.3.
Classification
CVE ID: CVE-2023-36528
CVSS Base Severity: MEDIUM
CVSS Base Score: 5.3
Affected Products
Vendor: FeedbackWP
Product: kk Star Ratings
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.48% (scored less or equal to compared to others)
EPSS Date: 2025-02-04 (when was this score calculated)