CVE-2022-40310

Authenticated (subscriber+) Race Condition vulnerability in Rate my Post – WP Rating System plugin <= 3.3.4 at WordPress allows attackers to increase/decrease votes.

Score

CVSS 3.1 4.3 Medium

Status

Modified - audit@patchstack.com

Published

2022-09-23

Last modified

2026-04-28

Weaknesses

CWE-362

Affected products

• Rate My Post Wp Rating System Wordpress Plugin (Blaz K.)
• Rate My Post - Wp Rating System (Blazzdev)

References

• https://patchstack.com/database/vulnerability/rate-my-post/wordpress-rate-my-post-wp-rating-system-plugin-3-3-4-race-co…
• https://wordpress.org/plugins/rate-my-post/#developers