CVE-2023-37867

Summary

CVE-2023-37867 is a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability found in the Yet Another Star Rating Plugin for WordPress, specifically affecting versions from n/a through 3.3.8. This vulnerability has a base severity rating of HIGH, with a base score of 8.1. It requires no privileges and no user interaction to exploit, and can be exploited remotely over a network. The integrity and confidentiality impact are both rated as HIGH. The vulnerability has an exploitability score of 2.2 and an impact score of 5.9. It poses a potential danger to organizations using the affected plugin as it could allow an attacker to manipulate ratings, potentially compromising the integrity and confidentiality of data on the WordPress site. Remediation for this vulnerability involves updating the Yet Another Star Rating Plugin for WordPress to version 3.3.9 or later to mitigate the risk posed by this issue. Note: The analysis_description field is empty, so it does not provide any additional information about the vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.