Lucene search

K
wpvulndbWpvulndbWPVDB-ID:79F7591B-36A7-4B5A-A402-D61BDDFF9BD1
HistoryNov 24, 2022 - 12:00 a.m.

WP ULike < 4.6.5 - Unauthenticated Rating Tampering via Race Condition

2022-11-2400:00:00
wpscan.com
6

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

The plugin is affected by a race condition which could allow unauthenticated attackers to increase and decrease ratings

CPENameOperatorVersion
wp-ulikelt4.6.5

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Related for WPVDB-ID:79F7591B-36A7-4B5A-A402-D61BDDFF9BD1