QID 150550

Date Published: 2022-07-29

QID 150550: WordPress Rating by BestWebSoft Plugin: Denial of Service Vulnerability (CVE-2021-25121)

Rating by BestWebSoft is a simple and powerful plugin, that can add a five-star rating to your website posts, widgets, and pages.

The plugin does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service on the post/page when a user submit such rating.

Affected Versions:
WordPress Rating by BestWebSoft Plugin before 1.6

QID Detection Logic:
This QID sends a HTTP GET request and checks for vulnerable version of WordPress plugin running on the target application.

Successful exploitation of the vulnerability can allow an attacker to trigger a Denial of Service attack.

CVSS V3 rated as High - 6.5 severity.

CVSS V2 rated as Medium - 4 severity.

Solution

Customers are advised to upgrade to Rating by BestWebSoft 1.6 or later version to remediate this vulnerability. For more information regarding this vulnerability please refer WPScan Security Advisory

Vendor References

WPScan - wpscan.com/vulnerability/efb1ddef-2123-416c-a932-856d41ed836d

CVEs related to QID 150550

CVE-2021-25121 |

Software Advisories

Advisory ID	Software	Component	Link
WPScan			wordpress.org/plugins/rating-bws/
WPScan			wpscan.com/vulnerability/efb1ddef-2123-416c-a932-856d41ed836d

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].