CVE-2014-2839: DEV4PRESS Gd Star Rating

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

SQL injection vulnerability in the GD Star Rating plugin 19.22 for WordPress allows remote administrators to execute arbitrary SQL commands via the s parameter in the gd-star-rating-stats page to wp-admin/admin.php.

Affected products

• DEV4PRESS Gd Star Rating: version 19.22 only

Published 2015-01-12. Last modified 2026-06-17.