What’s Vulnerable › Vulnerabilities

CVE-2022-36422: WP-PostRatings plugin <= 1.89 - Rating increase/decrease via race condition

• Severity: low (CVSS 3.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-09-09 · updated 2026-06-17
• Weakness: CWE-362

Description

Rating increase/decrease via race condition in Lester 'GaMerZ' Chan WP-PostRatings plugin <= 1.89 at WordPress.

Affected products

• Lester 'GaMerZ' Chan WP-PostRatings (WordPress plugin): through 1.89

References

• https://patchstack.com/database/vulnerability/wp-postratings/wordpress-wp-postratings-plugin-1-89-rating-increase-decrease-via-race-condition-vulnerability/_s_id=cve
• https://wordpress.org/plugins/wp-postratings/#developers
• https://patchstack.com/database/vulnerability/wp-postratings/wordpress-wp-postratings-plugin-1-89-rating-increase-decrease-via-race-condition-vulnerability/_s_id=cve
• https://wordpress.org/plugins/wp-postratings/#developers

Get alerted when CVE-2022-36422 or the next vulnerability affects your stack