{"id":"CVE-2023-40332","aliases":["EUVD-2023-44919","GHSA-rcjq-rrm8-5g33"],"status":"published","title":"WordPress WP-PostRatings plugin \u003c= 1.91 - Rating limit Bypass vulnerability","description":"Improper Control of Interaction Frequency vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Functionality Misuse.This issue affects WP-PostRatings: from n/a through 1.91.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00444,"percentile":0.38862,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-290","CWE-799"],"published":"2024-06-04T07:18:30Z","modified":"2026-06-17T06:17:16Z","products":[{"vendor":"lester ‘gamerz’ chan","product":"wp-postratings"},{"vendor":"lesterchan","product":"wp-postratings"}],"references":[{"url":"https://patchstack.com/database/vulnerability/wp-postratings/wordpress-wp-postratings-plugin-1-91-rating-limit-bypass-vulnerability?_s_id=cve","tags":["vdb-entry","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40332"},{"url":"https://github.com/advisories/GHSA-rcjq-rrm8-5g33"}],"sources":{"cve":[{"id":"CVE-2023-40332","title":"WordPress WP-PostRatings plugin \u003c= 1.91 - Rating limit Bypass vulnerability","description":"Improper Control of Interaction Frequency vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Functionality Misuse.This issue affects WP-PostRatings: from n/a through 1.91.","status":"published","published":"2024-06-04T07:18:30.124Z","modified":"2026-04-28T16:08:36.541Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-799"],"updated_at":"2026-11-02T14:35:21.971258Z"}],"euvd":[{"id":"EUVD-2023-44919","description":"Improper Control of Interaction Frequency vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Functionality Misuse.This issue affects WP-PostRatings: from n/a through 1.91.","status":"published","published":"2024-06-04T07:18:30Z","modified":"2026-04-28T16:08:36Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T19:24:06.820124Z"}],"ghsa":[{"id":"GHSA-rcjq-rrm8-5g33","title":"Improper Control of Interaction Frequency vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings...","description":"Improper Control of Interaction Frequency vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Functionality Misuse.This issue affects WP-PostRatings: from n/a through 1.91.","status":"published","published":"2024-06-04T09:30:57Z","modified":"2025-04-03T00:32:35Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-290","CWE-799"],"updated_at":"2026-11-02T15:00:36.60124Z"}],"nvd":[{"id":"CVE-2023-40332","description":"Improper Control of Interaction Frequency vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Functionality Misuse.This issue affects WP-PostRatings: from n/a through 1.91.","status":"published","published":"2024-06-04T08:15:09.337Z","modified":"2026-06-17T06:17:16.117Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-799","CWE-290"],"updated_at":"2026-11-02T14:09:17.205287Z"}]}}