blazzdev records

6 published records for vendor blazzdev.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

6 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
32Monitor	CVE-2023-51667No exploit	WordPress Rate my Post – WP Rating System plugin <= 3.4.2 - Broken Access Control vulnerabilityblazzdev · rate my post · CWE-290 Pre-auth Auth bypass Broken access control (IDOR)	High8.2	—	0.4%	Jun 4, 2024
26Monitor	CVE-2023-49765No exploit	WordPress Rate my Post – WP Rating System Plugin <= 3.4.1 is vulnerable to Insecure Direct Object References (IDOR)blazzdev · rate my post · CWE-639 Broken access control (IDOR)	Medium6.5	—	0.4%	Dec 21, 2023
21Monitor	CVE-2022-4673No exploit	Rate my Post – WP Rating System < 3.3.9 - Contributor+ Stored XSS via Shortcodeblazzdev · rate my post · CWE-79 XSS	Medium5.4	—	0.5%	Jan 23, 2023
21Monitor	CVE-2024-32823No exploit	WordPress Rate My Post plugin <= 3.4.4 - Insecure Direct Object References (IDOR) vulnerabilityblazzdev · rate my post · CWE-639 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.4%	Apr 24, 2024
17Monitor	CVE-2022-40671No exploit	WordPress Rate my Post – WP Rating System plugin <= 3.3.4 - Cross-Site Request Forgery (CSRF) vulnerabilityblazzdev · rate my post - wp rating system · CWE-352 Pre-auth CSRF	Medium4.3	—	0.3%	Sep 23, 2022
12Monitor	CVE-2022-40310No exploit	WordPress Rate my Post – WP Rating System plugin <= 3.3.4 - Race Condition vulnerabilityblazzdev · rate my post - wp rating system · CWE-362 Race condition	Low3.1	—	0.4%	Sep 23, 2022

CVE-2023-51667
32Monitor
WordPress Rate my Post – WP Rating System plugin <= 3.4.2 - Broken Access Control vulnerability
HighCVSS 8.2No exploitEPSS 0%
blazzdev · rate my postJun 4, 2024
CVE-2023-49765
26Monitor
WordPress Rate my Post – WP Rating System Plugin <= 3.4.1 is vulnerable to Insecure Direct Object References (IDOR)
MediumCVSS 6.5No exploitEPSS 0%
- Broken access control (IDOR)
blazzdev · rate my postDec 21, 2023
CVE-2022-4673
21Monitor
Rate my Post – WP Rating System < 3.3.9 - Contributor+ Stored XSS via Shortcode
MediumCVSS 5.4No exploitEPSS 0%
- XSS
blazzdev · rate my postJan 23, 2023
CVE-2024-32823
21Monitor
WordPress Rate My Post plugin <= 3.4.4 - Insecure Direct Object References (IDOR) vulnerability
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
blazzdev · rate my postApr 24, 2024
CVE-2022-40671
17Monitor
WordPress Rate my Post – WP Rating System plugin <= 3.3.4 - Cross-Site Request Forgery (CSRF) vulnerability
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
blazzdev · rate my post - wp rating systemSep 23, 2022
CVE-2022-40310
12Monitor
WordPress Rate my Post – WP Rating System plugin <= 3.3.4 - Race Condition vulnerability
LowCVSS 3.1No exploitEPSS 0%
- Race condition
blazzdev · rate my post - wp rating systemSep 23, 2022