CVE-2026-4301 | videowhisper Rate Star Review Vote Plugin up to 1.6.4 on WordPress AJAX vwrsr_review rating_id authorization

A vulnerability was found in videowhisper Rate Star Review Vote Plugin up to 1.6.4 on WordPress and classified as critical. The affected element is the function vwrsr_review of the component AJAX Handler. The manipulation of the argument rating_id results in missing authorization.

This vulnerability is known as CVE-2026-4301. It is possible to launch the attack remotely. No exploit is available.