CVE-2014-2839

SQL injection vulnerability in the GD Star Rating plugin 19.22 for WordPress allows remote...

7.5 High

CVE-2014-2839 is a high vulnerability (CVSS 7.5) in Dev4press Gd Star Rating, published January 12, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.64%, the 76th percentile. No source names a fixed version.

SQL injection vulnerability in the GD Star Rating plugin 19.22 for WordPress allows remote administrators to execute arbitrary SQL commands via the s parameter in the gd-star-rating-stats page to wp-admin/admin.php.

Exploit likelihood

1.64%Up 0.7 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2014-2839
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-89
Updated: 2026-11-02

CVE List No score

Record: CVE-2014-2839
Updated: 2026-11-02

EUVDEUVD-2014-2864 No score

Record: EUVD-2014-2864
Updated: 2026-11-03

GitHub AdvisoriesGHSA-5mvx-x39g-x2h7 No score

SQL injection vulnerability in the GD Star Rating plugin 19.22 for WordPress allows remote...

Record: GHSA-5mvx-x39g-x2h7
Weakness: CWE-89
Updated: 2026-11-02

Affected products

dev4press gd star rating

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

Exploit likelihood

What each source reports

Affected products

History

References