Description
WordPress Plugin Comment Rating is prone to a cross-site request forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application. Other attacks are also possible. WordPress Plugin Comment Rating versions prior to 2.9.21 are vulnerable.
Remediation
Update to plugin version 2.9.21 or latest
References
Related Vulnerabilities
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-1606)
SharePoint Out-of-bounds Write Vulnerability (CVE-2018-0792)
phpMyFAQ Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-6048)
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2018-1133)
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2019-9637)