Dev4Press GD Rating System vulnerabilities

Latest Dev4Press GD Rating System CVEs

Newest publication first

1. CVE-2026-42639 WordPress GD Rating System plugin <= 3.6.2 - SQL Injection vulnerability

   Published 2026-06-15

   Critical·CVSS 9.3 EPSS 0.28%

   Unauthenticated SQL Injection in GD Rating System <= 3.6.2 versions.

2. CVE-2024-25093 WordPress GD Rating System Plugin <= 3.5 is vulnerable to Cross Site Scripting (XSS)

   Published 2024-02-29

   Medium·CVSS 6.1 EPSS 0.40%

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD Rating System allows Stored XSS.This issue affects GD Rating System: from n/a through 3.5.

3. CVE-2017-18591 GD Rating System < 2.1 - Reflected Cross-Site Scripting

   Published 2019-08-27

   Medium·CVSS 6.1 EPSS 0.91%

   The gd-rating-system plugin before 2.1 for WordPress has XSS in log.php.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.