CVE-2021-24894

PoC —

CVSS 3.1

6.5 medium

EPSS

1%p72

Published

Nov 23, 2021 (Nov 23, 2021)

Modified

Jun 17, 2026

Description

The Reviews Plus WordPress plugin before 1.2.14 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service in the review section when an authenticated user submit such rating and the reviews are set to be displayed on the post/page

Vendors: implecode
Products: reviews plus
Ecosystems: WordPress
Weakness: CWE-191, CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.