This vulnerability (CVE-2024-32823) in the FeedbackWP Rate my Post – WP Rating System plugin allows an attacker to bypass authorization controls by manipulating a user-controlled key. The affected versions include all versions up to 3.4.4. The weakness is classified under CWE-639 (Authorization Bypass Through User-Controlled Key). The CVSS v3.1 base score is 5.3, indicating a medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. No patch or official remediation has been published yet.

An attacker can bypass authorization mechanisms in the Rate my Post – WP Rating System plugin, potentially allowing unauthorized actions related to rating posts. The impact is limited to integrity as per the CVSS vector (no confidentiality or availability impact). No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider restricting access to the plugin's functionality or monitoring for unusual activity related to rating submissions. Avoid relying on this plugin in high-risk environments until the vulnerability is addressed.