Skip to content
Not rated

CVE-2021-24894 The Reviews Plus WordPress plugin before 1.2.14 does not validate the submitted rating, allowing submission of long…

Description

The Reviews Plus WordPress plugin before 1.2.14 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service in the review section when an authenticated user submit such rating and the reviews are set to be displayed on the post/page

Affected products and versions

Product Affected versions Fixed in
Reviews Plus 1.2 earliest → < 1.2.14 1.2.14
Track this CVE