CVE-2021-24379

The CVE covers the WordPress Comments Like Dislike plugin (versions

WordPress 访问控制错误漏洞

WordPress is a set of open source blogging platforms developed using the PHP language by the WordPress Foundation. A replay attack vulnerability exists in the WordPress Comments Like Dislike plugin. An attacker can use this vulnerability to add an unlimited number of like/dislike comments to any...

PT-2021-15912

Name of the Vulnerable Software and Affected Versions Comments Like Dislike WordPress plugin versions prior to 1.1.4 Description The issue allows any user, including unauthenticated ones, to add unlimited likes or dislikes to any comment by replaying the AJAX request. The plugin's restriction...

CVE-2021-24379: Incorrect Authorization

The Comments Like Dislike WordPress plugin before 1.1.4 allows users to like/dislike posted comments, however does not prevent them from replaying the AJAX request to add a like. This allows any user even unauthenticated to add unlimited like/dislike to any comment. The plugin appears to have som...

WordPress Comments Like Dislike plugin <= 1.1.3 - Repeated Voting Restriction Bypass vulnerability

Repeated Voting Restriction Bypass vulnerability discovered by Phu Tran in WordPress Comments Like Dislike plugin versions = 1.1.3. Solution Update the WordPress Comments Like Dislike plugin to the latest available version at least 1.1.4...

Comments Like Dislike < 1.1.4 - Add Like/Dislike Bypass

The plugin allows users to like/dislike posted comments, however does not prevent them from replaying the AJAX request to add a like. This allows any user even unauthenticated to add unlimited like/dislike to any comment. The plugin appears to have some Restriction modes, such as Cookie...

WordPress Like Dislike Counter 1.2.3 插件 SQL注入漏洞

No description provided by source...

Here's How to Get Facebook New 'Dislike Button' to Your Profile

You may call this a misleading headline. Right? Yes, it's True. And I apologize for this. But… ...before someone else tricks you to visit any malicious link with intent to hijack your Computer or to Hack Facebook Profile, I just tricked you to visit this 'WARNING' article about Facebook Scam of t...

Here's What Facebook 'Dislike or Empathy Button' Would Look Like

A Facebook Dislike button is one of the most frequently requested features from users for years. Earlier in the last week, Facebook finally confirmed its plans to add a Dislike or Empathy to your Facebook Profile and News Feed. If you are thinking that Facebook Dislike is going to be a thumbs-dow...

Facebook to Add a 'Dislike' Button, Mark Zuckerberg Confirms

When a pet dies, or your friend's family member passed away, clicking the 'Like' button to express your sympathy doesn't feel comfortable. Here a user feels a need of something to express their sadness, disagreement, anger, or something other than 'Like': Facebook should have an empathetic...

Wordpress Like Dislike Counter 1.2.3 /wp-content/plugins/like-dislike-counter-for-posts-pages-and-comments/ajax_counter.php SQL注入漏洞

No description provided by source...

Wordpress Like Dislike Counter 1.2.3 Plugin - SQL Injection Vulnerability

一、插件介绍 是一个支持文章、页面和评论投票顶踩的插件，你可以将顶踩放在文章、页面评论的任意位置，还可以放在网站首页上。如果你有一定代码修改能里的话，可以将本插件集成到主题里。 二、漏洞概述 Like Dislike Counter 1.2.3及其他版本存在多个SQL注入漏洞，成功利用后可使攻击者执行未授权数据库操作。 三、漏洞描述 Like Dislike Counter 插件SQL注入漏洞存在于ajaxcounter.php文件中，主要原因是未对POST数据中的postid进行有效过滤，致使非法数据被数据库正常解析执行。 四、漏洞分析...

WordPress Plugin Like Dislike Counter 1.2.3 - SQL Injection

WordPress Plugin Like Dislike Counter 1.2.3 - SQL Injection Title : Wordpress Like Dislike Counter Plugin SQL Injection Vulnerability Risk : High+/Critical Exploit Author : XroGuE Google Dork : inurl:plugins/like-dislike-counter-for-posts-pages-and-comments/ajaxcounter.php AND...

WordPress Like Dislike Counter Plugin 1.2.3 - SQL Injection

This WordPress Like Dislike Counter plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress Like Dislike Counter 1.2.3 SQL Injection

Title : Wordpress Like Dislike Counter Plugin SQL Injection Vulnerability Risk : High+/Critical Exploit Author : XroGuE Google Dork : inurl:plugins/like-dislike-counter-for-posts-pages-and-comments/ajaxcounter.php AND plugins/pro-like-dislike-counter/ldc-ajax-counter.php Plugin Version : 1.2.3...

Wordpress Like Dislike Counter Plugin SQL Injection Vulnerability

Exploit for php platform in category web applications Title : Wordpress Like Dislike Counter Plugin SQL Injection Vulnerability Risk : High+/Critical Exploit Author : XroGuE Google Dork : inurl:plugins/like-dislike-counter-for-posts-pages-and-comments/ajaxcounter.php AND...

HEAT Call Logging 8.01 - SQL Injection

HEAT Call Logging 8.01 - SQL Injection = ;otokoyama; = -=HEAT Call Logging Version 8.01=- "The HEAT family is a comprehensive service solution, combining core technologies with a variety of expansion options, so any enterprise can build a tailored solution." -=web=-...