Lucene search
+L

66 matches found

NVD
NVD
added 2023/08/17 7:15 a.m.39 views

CVE-2023-3244

The Comments Like Dislike plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the restoresettings function called via an AJAX action in versions up to, and including, 1.2.0. This makes it possible for authenticated attackers with minimal...

4.3CVSS4.9AI score0.00939EPSS
SaveExploits4References4
OSV
OSV
added 2023/08/17 7:15 a.m.6 views

CVE-2023-3244

The Comments Like Dislike plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the restoresettings function called via an AJAX action in versions up to, and including, 1.1.9. This makes it possible for authenticated attackers with minimal...

4.3CVSS7.3AI score0.00939EPSS
SaveExploits4References2
Vulnrichment
Vulnrichment
added 2023/08/17 6:43 a.m.20 views

CVE-2023-3244 Comments Like Dislike <= 1.2.0 - Missing Authorization to Authenticated (Subscriber+) Plugin Setting Reset

The Comments Like Dislike plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the restoresettings function called via an AJAX action in versions up to, and including, 1.2.0. This makes it possible for authenticated attackers with minimal...

4.3CVSS6.4AI score0.00939EPSS
SaveExploits4References4
Positive Technologies
Positive Technologies
added 2023/08/17 12:00 a.m.11 views

PT-2023-5744 · WordPress · Comments Like Dislike

Name of the Vulnerable Software and Affected Versions: Comments Like Dislike plugin for WordPress versions up to, and including, 1.1.9 Description: The issue is related to a missing capability check on the restore settings function, which can be exploited via an AJAX action. This allows...

5.3CVSS4.7AI score0.00939EPSS
SaveExploits4References10
CNNVD
CNNVD
added 2023/08/17 12:00 a.m.10 views

WordPress Plugin Comments Like Dislike 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

5.3CVSS6AI score0.00939EPSS
SaveExploits4References3
OSV
OSV
added 2022/02/21 11:15 a.m.10 views

CVE-2022-0279

The AnyComment WordPress plugin before 0.2.18 is affected by a race condition when liking/disliking a comment/reply, which could allow any authenticated user to quickly raise their rating or lower the rating of other users...

3.1CVSS5.8AI score0.00494EPSS
SaveExploits2References1
OSV
OSV
added 2021/06/21 8:15 p.m.8 views

CVE-2021-24379

The Comments Like Dislike WordPress plugin before 1.1.4 allows users to like/dislike posted comments, however does not prevent them from replaying the AJAX request to add a like. This allows any user even unauthenticated to add unlimited like/dislike to any comment. The plugin appears to have som...

5.3CVSS5.8AI score0.00981EPSS
SaveExploits2References1
NVD
NVD
added 2021/06/21 8:15 p.m.30 views

CVE-2021-24379

The Comments Like Dislike WordPress plugin before 1.1.4 allows users to like/dislike posted comments, however does not prevent them from replaying the AJAX request to add a like. This allows any user even unauthenticated to add unlimited like/dislike to any comment. The plugin appears to have som...

5.3CVSS0.00981EPSS
SaveExploits2References1
Prion
Prion
added 2021/06/21 8:15 p.m.23 views

Design/Logic Flaw

The Comments Like Dislike WordPress plugin before 1.1.4 allows users to like/dislike posted comments, however does not prevent them from replaying the AJAX request to add a like. This allows any user even unauthenticated to add unlimited like/dislike to any comment. The plugin appears to have som...

5CVSS5.2AI score0.00981EPSS
SaveExploits2References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/06/21 8:15 p.m.6 views

CVE-2021-24379

The Comments Like Dislike WordPress plugin before 1.1.4 allows users to like/dislike posted comments, however does not prevent them from replaying the AJAX request to add a like. This allows any user even unauthenticated to add unlimited like/dislike to any comment. The plugin appears to have som...

5.3CVSS6.1AI score0.00981EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2021/06/21 7:18 p.m.34 views

CVE-2021-24379 Comments Like Dislike < 1.1.4 - Add Like/Dislike Bypass

The Comments Like Dislike WordPress plugin before 1.1.4 allows users to like/dislike posted comments, however does not prevent them from replaying the AJAX request to add a like. This allows any user even unauthenticated to add unlimited like/dislike to any comment. The plugin appears to have som...

5.5AI score0.00981EPSS
SaveExploits2References1
CVE
CVE
added 2021/06/21 7:18 p.m.63 views

CVE-2021-24379

The CVE covers the WordPress Comments Like Dislike plugin (versions

5.3CVSS5.2AI score0.00981EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
added 2021/06/21 12:00 a.m.7 views

WordPress 访问控制错误漏洞

WordPress is a set of open source blogging platforms developed using the PHP language by the WordPress Foundation. A replay attack vulnerability exists in the WordPress Comments Like Dislike plugin. An attacker can use this vulnerability to add an unlimited number of like/dislike comments to any...

5.3CVSS5.7AI score0.00981EPSS
SaveExploits2References1
Patchstack
Patchstack
added 2021/06/07 12:00 a.m.22 views

WordPress Comments Like Dislike plugin <= 1.1.3 - Repeated Voting Restriction Bypass vulnerability

Repeated Voting Restriction Bypass vulnerability discovered by Phu Tran in WordPress Comments Like Dislike plugin versions = 1.1.3. Solution Update the WordPress Comments Like Dislike plugin to the latest available version at least 1.1.4...

5.3CVSS3.4AI score0.00981EPSS
SaveExploits2References3Affected Software1
wpexploit
wpexploit
added 2021/06/07 12:00 a.m.777 views

Comments Like Dislike < 1.1.4 - Add Like/Dislike Bypass

The plugin allows users to like/dislike posted comments, however does not prevent them from replaying the AJAX request to add a like. This allows any user even unauthenticated to add unlimited like/dislike to any comment. The plugin appears to have some Restriction modes, such as Cookie...

5.3CVSS0.8AI score0.00981EPSS
SaveExploits2
seebug.org
seebug.org
added 2016/06/27 12:00 a.m.25 views

WordPress Like Dislike Counter 1.2.3 插件 SQL注入漏洞

No description provided by source...

7.1AI score
SaveExploits0
The Hacker News
The Hacker News
added 2015/09/22 8:19 a.m.15 views

Here's How to Get Facebook New 'Dislike Button' to Your Profile

You may call this a misleading headline. Right? Yes, it's True. And I apologize for this. But… ...before someone else tricks you to visit any malicious link with intent to hijack your Computer or to Hack Facebook Profile, I just tricked you to visit this 'WARNING' article about Facebook Scam of t...

6.3AI score
SaveExploits0
The Hacker News
The Hacker News
added 2015/09/22 5:24 a.m.37 views

Here's What Facebook 'Dislike or Empathy Button' Would Look Like

A Facebook Dislike button is one of the most frequently requested features from users for years. Earlier in the last week, Facebook finally confirmed its plans to add a Dislike or Empathy to your Facebook Profile and News Feed. If you are thinking that Facebook Dislike is going to be a thumbs-dow...

6.7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2015/09/15 8:26 p.m.27 views

Facebook to Add a 'Dislike' Button, Mark Zuckerberg Confirms

When a pet dies, or your friend's family member passed away, clicking the 'Like' button to express your sympathy doesn't feel comfortable. Here a user feels a need of something to express their sadness, disagreement, anger, or something other than 'Like': Facebook should have an empathetic...

6.7AI score
SaveExploits0
seebug.org
seebug.org
added 2014/09/22 12:00 a.m.23 views

Wordpress Like Dislike Counter 1.2.3 /wp-content/plugins/like-dislike-counter-for-posts-pages-and-comments/ajax_counter.php SQL注入漏洞

No description provided by source...

7.1AI score
SaveExploits0
Rows per page
Query Builder