Fivestar
Monthly
Insecure Direct Object Reference (IDOR) in the FiveStar WordPress theme allows authenticated low-privilege users to modify or delete arbitrary data due to missing authorization checks on user-controlled keys. Versions up to and including 1.7 are affected, and exploitation can lead to integrity and availability impacts without confidentiality loss. No active exploitation or public exploit is currently identified.
Insecure Direct Object Reference (IDOR) in the FiveStar WordPress theme allows authenticated low-privilege users to modify or delete arbitrary data due to missing authorization checks on user-controlled keys. Versions up to and including 1.7 are affected, and exploitation can lead to integrity and availability impacts without confidentiality loss. No active exploitation or public exploit is currently identified.