CVE-2023-4642: Kamalkhan Kk Star Ratings

Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The kk Star Ratings WordPress plugin before 5.4.6 does not implement atomic operations, allowing one user vote multiple times on a poll due to a Race Condition.

Affected products

  • Kamalkhan Kk Star Ratings: before 5.4.6 (fixed in 5.4.6)

Published 2023-11-27. Last modified 2026-06-17.