Read the docs

Bologer

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Bologer records in CISA KEV

No Bologer vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Anycomment 4 records LOW

Records

4 records

TI-2022-00077 CVE-2022-0134 · GHSA-wh4r-2vqj-7php

AnyComment < 0.2.18 - Arbitrary HyperComments Import/Revert via CSRF

Priority LOW 39

The AnyComment WordPress plugin before 0.2.18 does not have CSRF checks in the Import and Revert HyperComments features, allowing attackers to make logged in admin perform such actions via a CSRF attack

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00645 Published 2022-02-21 Fixed in 0.2.18 CWE-352
TI-2021-07120 CVE-2021-24838 · GHSA-3cq7-3xmj-m7r2

AnyComment < 0.3.5 - Open Redirect

Priority LOW 32

The AnyComment WordPress plugin before 0.3.5 has an API endpoint which passes user input via the redirect parameter to the wp_redirect() function without being validated first, leading to an Open Redirect issue, which ac…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02208 Published 2022-01-17 Fixed in 0.3.5 CWE-601
TI-2022-00211 CVE-2022-0279 · GHSA-g7w5-4hph-r98m

AnyComment < 0.2.18 - Comment Rating Increase/Decrease via Race Condition

Priority LOW 16

The AnyComment WordPress plugin before 0.2.18 is affected by a race condition when liking/disliking a comment/reply, which could allow any authenticated user to quickly raise their rating or lower the rating of other use…

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00494 Published 2022-02-21 Fixed in 0.2.18 CWE-362
Open these records in search →