CVE-2021-24893

CVE-2021-24893: Stars Rating < 3.5.1 - Comments Denial of Service

Vendor Unknown

Product Stars Rating

Weakness CWE-400

Published January 3, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Stars Rating WordPress plugin before 3.5.1 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service in the comments section, or pending comment dashboard depending if the user sent it as unauthenticated or authenticated.

Key dates

02Disclosure timeline

January 3, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-24893 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/400.html

Related vulnerabilities

04Related CVE

CVE-2026-24485 ImageMagick: Infinite loop vulnerability when parsing a PCD file CVE-2025-29898 Qsync Central CVE-2021-32838 Regular Expression Denial of Service in flask-restx CVE-2023-22486 cmark-gfm Quadratic complexity bug in handle_close_bracket may lead to a denial of service CVE-2026-34678 CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)