CVE-2015-9465: Yet Another Stars Rating Project Yet Another Stars Rating

High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days.

The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasr_get_multi_set_values_and_field SQL injection via the set_id parameter.

Affected products

• Yet Another Stars Rating Project Yet Another Stars Rating: before 0.9.1 (fixed in 0.9.1)

Published 2019-10-10. Last modified 2026-06-17.