https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-19T17:08:15.264197+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-109323 CVE-2026-109323 — Grav Star Ratings 2.0.1 through 2.0.3 Missing Server-Side vote_access Authorization 2026-10-19T17:08:15.265862+00:00

Affected: getgrav grav-plugin-star-ratings

Grav Star Ratings 2.0.1 through 2.0.3 contains a missing authorization vulnerability that allows unauthenticated visitors to vote by bypassing client-only vote_access and readonly enforcement. Attackers can use the anonymous nonce emitted by getData() to submit votes directly to addVote(), manipulating restricted or disabled ratings and aggregate rating output.