Is YASR safe?

Every recorded flaw

• Dec 13, 2024Yet Another Stars Rating: Missing AuthorizationCVE-2023-39305 · affects up to 3.4.3 · reported by PatchstackMedium 5.3
• Nov 30, 2023YASR – Yet Another Star Rating Plugin for: Time-of-check Time-of-use (TOCTOU) Race ConditionCVE-2023-37867 · affects up to 3.3.8 · reported by PatchstackLow 3.7
• Mar 16, 2023Cross-Site Scripting (XSS) vulnerability in Dario Curvino Yasr – Yet Another Stars Rating plugin <= 3.1.2 versions.CVE-2022-40699 · affects up to 3.1.2 · reported by PatchstackMedium 5.4
• Feb 4, 2022Cross-Site Scripting (XSS) vulnerability discovered in Yasr – Yet Another Stars Rating WordPress plugin (versions <= 2.9.9), vulnerable at parameter 'source'.CVE-2022-23980 · affects up to 2.9.9 · reported by PatchstackMedium 4.7
• Oct 10, 2019The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasr_get_multi_set_values_and_field SQL injection via the set_id parameter.CVE-2015-9465 · fixed in 0.9.1 · reported by MITRE1.9% oddsHigh 8.8

Records come from the National Vulnerability Database, published by the researchers who found each flaw (Wordfence, Patchstack, WPScan and others); exploited status from CISA; exploit odds from FIRST’s EPSS; current version, installs and closures from wordpress.org, checked daily. Want every plugin on your site checked at once? Run the free website check.