CVE-2022-40310 - Vulnerability Details - OpenCVE

Authenticated (subscriber+) Race Condition vulnerability in Rate my Post – WP Rating System plugin <= 3.3.4 at WordPress allows attackers to increase/decrease votes.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00142.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Blazzdev	Rate My Post - Wp Rating System

Configuration 1 [-]

cpe:2.3:a:blazzdev:rate_my_post_-_wp_rating_system:*:*:*:*:*:wordpress:*:*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2022-43605	Authenticated (subscriber+) Race Condition vulnerability in Rate my Post – WP Rating System plugin <= 3.3.4 at WordPress allows attackers to increase/decrease votes.

Fixes

Solution

Update to 3.3.5 or higher version.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://patchstack.com/database/vulnerability/rate-my-post/wordpress-rate-my-post-wp-rating-system-plugin-3-3-4-race-condition-vulnerability/_s_id=cve
https://wordpress.org/plugins/rate-my-post/#developers

History

Thu, 20 Feb 2025 20:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Patchstack

Published: 2022-09-23T14:20:52.161Z

Updated: 2025-02-20T20:03:45.598Z

Reserved: 2022-09-14T00:00:00.000Z

Link: CVE-2022-40310

Vulnrichment

Updated: 2024-08-03T12:14:40.080Z

NVD

Status : Modified

Published: 2022-09-23T15:15:14.113

Modified: 2025-02-20T20:15:40.627

Link: CVE-2022-40310

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "Rate my Post \u2013 WP Rating System (WordPress plugin)", "vendor": "Blaz K.", "versions": [{"lessThanOrEqual": "3.3.4", "status": "affected", "version": "<= 3.3.4", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "Vulnerability discovered by Nguy Minh Tuan (Patchstack Alliance)"}], "datePublic": "2022-09-14T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Authenticated (subscriber+) Race Condition vulnerability in Rate my Post \u2013 WP Rating System plugin <= 3.3.4 at WordPress allows attackers to increase/decrease votes."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"description": "Race condition", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-09-23T14:20:52.000Z", "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://wordpress.org/plugins/rate-my-post/#developers"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://patchstack.com/database/vulnerability/rate-my-post/wordpress-rate-my-post-wp-rating-system-plugin-3-3-4-race-condition-vulnerability/_s_id=cve"}], "solutions": [{"lang": "en", "value": "Update to 3.3.5 or higher version."}], "source": {"discovery": "EXTERNAL"}, "title": "WordPress Rate my Post \u2013 WP Rating System plugin <= 3.3.4 - Race Condition vulnerability", "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "audit@patchstack.com", "DATE_PUBLIC": "2022-09-14T07:01:00.000Z", "ID": "CVE-2022-40310", "STATE": "PUBLIC", "TITLE": "WordPress Rate my Post \u2013 WP Rating System plugin <= 3.3.4 - Race Condition vulnerability"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Rate my Post \u2013 WP Rating System (WordPress plugin)", "version": {"version_data": [{"version_affected": "<=", "version_name": "<= 3.3.4", "version_value": "3.3.4"}]}}]}, "vendor_name": "Blaz K."}]}}, "credit": [{"lang": "eng", "value": "Vulnerability discovered by Nguy Minh Tuan (Patchstack Alliance)"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Authenticated (subscriber+) Race Condition vulnerability in Rate my Post \u2013 WP Rating System plugin <= 3.3.4 at WordPress allows attackers to increase/decrease votes."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Race condition"}]}]}, "references": {"reference_data": [{"name": "https://wordpress.org/plugins/rate-my-post/#developers", "refsource": "CONFIRM", "url": "https://wordpress.org/plugins/rate-my-post/#developers"}, {"name": "https://patchstack.com/database/vulnerability/rate-my-post/wordpress-rate-my-post-wp-rating-system-plugin-3-3-4-race-condition-vulnerability/_s_id=cve", "refsource": "CONFIRM", "url": "https://patchstack.com/database/vulnerability/rate-my-post/wordpress-rate-my-post-wp-rating-system-plugin-3-3-4-race-condition-vulnerability/_s_id=cve"}]}, "solution": [{"lang": "en", "value": "Update to 3.3.5 or higher version."}], "source": {"discovery": "EXTERNAL"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T12:14:40.080Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://wordpress.org/plugins/rate-my-post/#developers"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://patchstack.com/database/vulnerability/rate-my-post/wordpress-rate-my-post-wp-rating-system-plugin-3-3-4-race-condition-vulnerability/_s_id=cve"}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-362", "lang": "en", "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-02-20T19:24:02.753738Z", "id": "CVE-2022-40310", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-20T20:03:45.598Z"}}]}, "cveMetadata": {"assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", "assignerShortName": "Patchstack", "cveId": "CVE-2022-40310", "datePublished": "2022-09-23T14:20:52.161Z", "dateReserved": "2022-09-14T00:00:00.000Z", "dateUpdated": "2025-02-20T20:03:45.598Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"containers": {"cna": {"affected": [{"product": "Rate my Post \u2013 WP Rating System (WordPress plugin)", "vendor": "Blaz K.", "versions": [{"lessThanOrEqual": "3.3.4", "status": "affected", "version": "<= 3.3.4", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "Vulnerability discovered by Nguy Minh Tuan (Patchstack Alliance)"}], "datePublic": "2022-09-14T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Authenticated (subscriber+) Race Condition vulnerability in Rate my Post \u2013 WP Rating System plugin <= 3.3.4 at WordPress allows attackers to increase/decrease votes."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"description": "Race condition", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-09-23T14:20:52.000Z", "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://wordpress.org/plugins/rate-my-post/#developers"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://patchstack.com/database/vulnerability/rate-my-post/wordpress-rate-my-post-wp-rating-system-plugin-3-3-4-race-condition-vulnerability/_s_id=cve"}], "solutions": [{"lang": "en", "value": "Update to 3.3.5 or higher version."}], "source": {"discovery": "EXTERNAL"}, "title": "WordPress Rate my Post \u2013 WP Rating System plugin <= 3.3.4 - Race Condition vulnerability", "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "audit@patchstack.com", "DATE_PUBLIC": "2022-09-14T07:01:00.000Z", "ID": "CVE-2022-40310", "STATE": "PUBLIC", "TITLE": "WordPress Rate my Post \u2013 WP Rating System plugin <= 3.3.4 - Race Condition vulnerability"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Rate my Post \u2013 WP Rating System (WordPress plugin)", "version": {"version_data": [{"version_affected": "<=", "version_name": "<= 3.3.4", "version_value": "3.3.4"}]}}]}, "vendor_name": "Blaz K."}]}}, "credit": [{"lang": "eng", "value": "Vulnerability discovered by Nguy Minh Tuan (Patchstack Alliance)"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Authenticated (subscriber+) Race Condition vulnerability in Rate my Post \u2013 WP Rating System plugin <= 3.3.4 at WordPress allows attackers to increase/decrease votes."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Race condition"}]}]}, "references": {"reference_data": [{"name": "https://wordpress.org/plugins/rate-my-post/#developers", "refsource": "CONFIRM", "url": "https://wordpress.org/plugins/rate-my-post/#developers"}, {"name": "https://patchstack.com/database/vulnerability/rate-my-post/wordpress-rate-my-post-wp-rating-system-plugin-3-3-4-race-condition-vulnerability/_s_id=cve", "refsource": "CONFIRM", "url": "https://patchstack.com/database/vulnerability/rate-my-post/wordpress-rate-my-post-wp-rating-system-plugin-3-3-4-race-condition-vulnerability/_s_id=cve"}]}, "solution": [{"lang": "en", "value": "Update to 3.3.5 or higher version."}], "source": {"discovery": "EXTERNAL"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T12:14:40.080Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://wordpress.org/plugins/rate-my-post/#developers"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://patchstack.com/database/vulnerability/rate-my-post/wordpress-rate-my-post-wp-rating-system-plugin-3-3-4-race-condition-vulnerability/_s_id=cve"}]}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-40310", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-02-20T19:24:02.753738Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-362", "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-20T19:24:04.106Z"}}]}, "cveMetadata": {"assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", "assignerShortName": "Patchstack", "cveId": "CVE-2022-40310", "datePublished": "2022-09-23T14:20:52.161Z", "dateReserved": "2022-09-14T00:00:00.000Z", "dateUpdated": "2025-02-20T20:03:45.598Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:blazzdev:rate_my_post_-_wp_rating_system:*:*:*:*:*:wordpress:*:*", "matchCriteriaId": "C778DE86-3F7A-41BC-BE34-A3135B364265", "versionEndIncluding": "3.3.4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Authenticated (subscriber+) Race Condition vulnerability in Rate my Post \u2013 WP Rating System plugin <= 3.3.4 at WordPress allows attackers to increase/decrease votes."}, {"lang": "es", "value": "Una vulnerabilidad de Condici\u00f3n de Carrera Autenticado (suscriptor+) en el plugin Rate my Post - WP Rating System versiones anteriores a 3.3.4 incluy\u00e9ndola en WordPress que permite a atacantes aumentar/disminuir los votos."}], "id": "CVE-2022-40310", "lastModified": "2025-02-20T20:15:40.627", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "audit@patchstack.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-09-23T15:15:14.113", "references": [{"source": "audit@patchstack.com", "tags": ["Broken Link", "Third Party Advisory"], "url": "https://patchstack.com/database/vulnerability/rate-my-post/wordpress-rate-my-post-wp-rating-system-plugin-3-3-4-race-condition-vulnerability/_s_id=cve"}, {"source": "audit@patchstack.com", "tags": ["Product", "Release Notes"], "url": "https://wordpress.org/plugins/rate-my-post/#developers"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory"], "url": "https://patchstack.com/database/vulnerability/rate-my-post/wordpress-rate-my-post-wp-rating-system-plugin-3-3-4-race-condition-vulnerability/_s_id=cve"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product", "Release Notes"], "url": "https://wordpress.org/plugins/rate-my-post/#developers"}], "sourceIdentifier": "audit@patchstack.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-362"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-362"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}