Lucene search
WpvulndbWPVDB-ID:BDB58F7C-0C1F-4448-A88C-8C6273D43546HistoryAug 18, 2023 - 12:00 a.m.
Comments Like Dislike < 1.2.0 - Subscriber+ Settings Reset
2023-08-1800:00:00
wpscan.com
4
plugin
authorization
settings
authenticated users
subscriber
ajax
Description The plugin does not have authorisation when resetting its settings, allowing ay authenticated users, such as subscriber to reset them via the restore_settings function hooked to an AJAX action
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 1.2.0 |
Related
cve
cve
CVE-2023-3244
2023-08-17 07:15:43
exploitdb
exploitdb
prion
prion
Design/Logic Flaw
2023-08-17 07:15:00
cvelist
cvelist
CVE-2023-3244
2023-08-17 06:43:42
nvd
nvd
CVE-2023-3244
2023-08-17 07:15:43
packetstorm
packetstorm
WordPress Comments Like Dislike 1.2.0 Missing Authorization
2024-02-27 00:00:00
zdt
zdt
githubexploit
githubexploit
Exploit for CVE-2023-3244
2023-09-13 11:52:36
wordfence
wordfence
6.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.2%
Related for WPVDB-ID:BDB58F7C-0C1F-4448-A88C-8C6273D43546