CVE-2015-4109

CVE-2015-4109 describes multiple SQL injection vulnerabilities in the ratings module of the Users Ultra plugin for WordPress, affecting versions prior to 1.5.16. Attackers can exploit these flaws remotely by manipulating the 'data_target' or 'data_vote' parameters in a 'rating_vote' action to execute arbitrary SQL commands. With a CVSS score of 7.5, this vulnerability is considered high severity due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.