Lucene search
K

18 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-11291

Malware in sbrugna...

5.3CVSS5.3AI score0.00296EPSS
Exploits2References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-23208

Malicious code in bioql PyPI...

4.3CVSS8.7AI score0.00099EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:49 a.m.10 views

CVE-2024-25906

Authentication Bypass by Spoofing vulnerability in WP Happy Coders Comments Like Dislike allows Functionality Bypass.This issue affects Comments Like Dislike: from n/a through 1.2.2...

4.3CVSS7AI score0.00099EPSS
Exploits0References1
NVD
NVD
added 2024/05/17 9:15 a.m.7 views

CVE-2024-25906

Authentication Bypass by Spoofing vulnerability in WP Happy Coders Comments Like Dislike allows Functionality Bypass.This issue affects Comments Like Dislike: from n/a through 1.2.2...

4.3CVSS4.7AI score0.00099EPSS
Exploits0References1
CVE
CVE
added 2024/05/17 8:22 a.m.46 views

CVE-2024-25906

CVE-2024-25906 affects the WordPress plugin Comments Like Dislike (WP Happy Coders) up to version 1.2.2 . The issue is an authentication bypass via spoofing, specifically an IP restriction bypass that can allow functionality bypass/escalation of access as described in Patchstack and Red Hat/NVD r...

4.3CVSS6.8AI score0.00099EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/05/17 12:0 a.m.1 views

PT-2024-21197 · WordPress · Wp Happy Coders Comments Like Dislike

Name of the Vulnerable Software and Affected Versions: WP Happy Coders Comments Like Dislike versions 1.2.2 and earlier Description: The issue is related to an Authentication Bypass by Spoofing vulnerability, which allows functionality bypass. Recommendations: For versions 1.2.2 and earlier, upda...

4.3CVSS9.5AI score0.00099EPSS
Exploits0References3
Packet Storm
Packet Storm
added 2024/02/27 12:0 a.m.389 views

WordPress Comments Like Dislike 1.2.0 Missing Authorization

Exploit Title: POC-CVE-2023-3244 Date: 9/12/2023 Exploit Author: Diaa Hanna Software Link: download link if available Version: = 1.2.0 comments-like-dislike Tested on: 1.1.6 comments-like-dislike CVE : CVE-2023-3244 References https://nvd.nist.gov/vuln/detail/CVE-2023-3244 The Comments Like Disli...

5.3CVSS7.4AI score0.03735EPSS
Exploits4
Exploit DB
Exploit DB
added 2024/02/26 12:0 a.m.400 views

comments-like-dislike < 1.2.0 - Authenticated (Subscriber+) Plugin Setting Reset

Exploit Title: POC-CVE-2023-3244 Date: 9/12/2023 Exploit Author: Diaa Hanna Software Link: download link if available Version: = 1.2.0 comments-like-dislike Tested on: 1.1.6 comments-like-dislike CVE : CVE-2023-3244 References https://nvd.nist.gov/vuln/detail/CVE-2023-3244 The Comments Like Disli...

4.3CVSS4.8AI score0.03735EPSS
Exploits4
0day.today
0day.today
added 2024/02/26 12:0 a.m.354 views

comments-like-dislike < 1.2.0 - Authenticated (Subscriber+) Plugin Setting Reset Exploit

Exploit Title: POC-CVE-2023-3244 Exploit Author: Diaa Hanna Software Link: download link if available Version: = 1.2.0 comments-like-dislike Tested on: 1.1.6 comments-like-dislike CVE : CVE-2023-3244 References https://nvd.nist.gov/vuln/detail/CVE-2023-3244 The Comments Like Dislike plugin for...

5.3CVSS7.1AI score0.03735EPSS
Exploits4
Patchstack
Patchstack
added 2024/02/12 12:0 a.m.8 views

WordPress Comments Like Dislike Plugin <= 1.2.2 is vulnerable to Bypass Vulnerability

Software Comments Like Dislike Type Plugin Vulnerable versions = 1.2.2 Fixed in 1.2.3 OWASP Top 10 A1: Broken Access Control Classification Bypass Vulnerability CVE CVE-2024-25906 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID a646d3bbd927 Credits Mika Required privilege...

4.3CVSS6.6AI score0.00099EPSS
Exploits0References2Affected Software1
GithubExploit
GithubExploit
added 2023/09/13 11:52 a.m.382 views

Exploit for CVE-2023-3244

proof of concept for CVE-2023-3244 Hello, this is a simple Pr...

5.3CVSS5.1AI score0.03735EPSS
Exploits4
NVD
NVD
added 2023/08/17 7:15 a.m.14 views

CVE-2023-3244

The Comments Like Dislike plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the restoresettings function called via an AJAX action in versions up to, and including, 1.2.0. This makes it possible for authenticated attackers with minimal...

4.3CVSS4.9AI score0.03735EPSS
Exploits4References4
OSV
OSV
added 2023/08/17 7:15 a.m.0 views

CVE-2023-3244

The Comments Like Dislike plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the restoresettings function called via an AJAX action in versions up to, and including, 1.1.9. This makes it possible for authenticated attackers with minimal...

4.3CVSS7.3AI score
Exploits0References2
CNNVD
CNNVD
added 2023/08/17 12:0 a.m.4 views

WordPress Plugin Comments Like Dislike 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

5.3CVSS6AI score0.03735EPSS
Exploits4References3
Positive Technologies
Positive Technologies
added 2023/08/17 12:0 a.m.6 views

PT-2023-5744 · WordPress · Comments Like Dislike

Name of the Vulnerable Software and Affected Versions: Comments Like Dislike plugin for WordPress versions up to, and including, 1.1.9 Description: The issue is related to a missing capability check on the restore settings function, which can be exploited via an AJAX action. This allows...

5.3CVSS4.7AI score0.03735EPSS
Exploits4References10
OSV
OSV
added 2021/06/21 8:15 p.m.0 views

CVE-2021-24379

The Comments Like Dislike WordPress plugin before 1.1.4 allows users to like/dislike posted comments, however does not prevent them from replaying the AJAX request to add a like. This allows any user even unauthenticated to add unlimited like/dislike to any comment. The plugin appears to have som...

5.3CVSS5.8AI score0.00296EPSS
Exploits2References1
CVE
CVE
added 2021/06/21 7:18 p.m.48 views

CVE-2021-24379

The CVE covers the WordPress Comments Like Dislike plugin (versions

5.3CVSS5.2AI score0.00296EPSS
Exploits2References1Affected Software1
CNNVD
CNNVD
added 2021/06/21 12:0 a.m.1 views

WordPress 访问控制错误漏洞

WordPress is a set of open source blogging platforms developed using the PHP language by the WordPress Foundation. A replay attack vulnerability exists in the WordPress Comments Like Dislike plugin. An attacker can use this vulnerability to add an unlimited number of like/dislike comments to any...

5.3CVSS5.7AI score0.00296EPSS
Exploits2References1
Rows per page
Query Builder