Is Rate My Post safe?

Every recorded flaw

• Dec 13, 2024Rate My Post – Star Rating Plugin by FeedbackWP: Insecure Direct Object ReferenceCVE-2024-12309 · affects up to 4.2.4 · reported by WordfenceMedium 5.3
• Jun 4, 2024Rate my Post – WP Rating System: Authentication Bypass by SpoofingCVE-2023-51667 · affects up to 3.4.2 · reported by PatchstackMedium 5.3
• Apr 24, 2024Rate my Post – WP Rating System: Authorization Bypass Through User-Controlled KeyCVE-2024-32823 · affects up to 3.4.4 · reported by PatchstackMedium 5.3
• Dec 21, 2023Rate my Post – WP Rating System: Authorization Bypass Through User-Controlled KeyCVE-2023-49765 · affects up to 3.4.1 · reported by PatchstackMedium 4.3
• Jan 23, 2023Rate my Post: Does not validate and escape one of its shortcode attributesCVE-2022-4673 · fixed in 3.3.9 · reported by WPScanMedium 5.4
• Sep 23, 2022Cross-Site Request Forgery (CSRF) vulnerability in Rate my Post – WP Rating System plugin <= 3.3.4 at WordPress.CVE-2022-40671 · affects up to 3.3.4 · reported by PatchstackMedium 4.3
• Sep 23, 2022Rate my Post – WP Rating System plugin <= 3.3.4 at: Authenticated (subscriber+) Race ConditionCVE-2022-40310 · affects up to 3.3.4 · reported by PatchstackMedium 4.3

Records come from the National Vulnerability Database, published by the researchers who found each flaw (Wordfence, Patchstack, WPScan and others); exploited status from CISA; exploit odds from FIRST’s EPSS; current version, installs and closures from wordpress.org, checked daily. Want every plugin on your site checked at once? Run the free website check.