Lesterchan

9 CVEs across 5 Lesterchan products. Browse Lesterchan vulnerabilities, severities, and proof-of-concept exploits.

Lesterchan products with known CVEs

ProductCVEs
Wp-Postratings5
Wp-Downloadmanager1
Wp-Email1
Wp-Postviews1
Wp-Useronline1
Lesterchan CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-39659Medium6.52024-08-01Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Stored…
CVE-2023-40332Medium5.32024-06-04Improper Control of Interaction Frequency vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Functionality Misuse.This issue affects WP-PostRatings: f…
CVE-2011-10006Low3.52024-04-08A vulnerability was found in GamerZ WP-PostRatings up to 1.64. It has been classified as problematic. This affects an unknown part of the file wp-postratings.p…
CVE-2021-25117Medium4.82024-01-16The WP-PostRatings WordPress plugin before 1.86.1 does not sanitise the postratings_image parameter from its options page (wp-admin/admin.php?page=wp-postratin…
CVE-2023-5560Medium6.12023-11-27The WP-UserOnline WordPress plugin before 2.88.3 does not sanitise and escape the X-Forwarded-For header before outputting its content on the page, which allow…
CVE-2023-3721Medium4.82023-08-14The WP-EMail WordPress plugin before 2.69.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…
CVE-2013-32522014-04-10Cross-site request forgery (CSRF) vulnerability in the options admin page in the WP-PostViews plugin before 1.63 for WordPress allows remote attackers to hijac…
CVE-2013-26972013-04-19Cross-site request forgery (CSRF) vulnerability in the WP-DownloadManager plugin before 1.61 for WordPress allows remote attackers to hijack the authentication…
CVE-2011-46462011-11-30SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50, 1.61, and probably other versions before 1.62 for WordPress allows remote…