Read the docs

WP Happy Coders

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

WP Happy Coders records in CISA KEV

No WP Happy Coders vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Comments Like Dislike 2 records LOW

Records

4 records

TI-2023-22242 CVE-2023-41849 · GHSA-2jpx-8fpp-54rx

WordPress Posts Like Dislike plugin <= 1.1.0 - Broken Access Control vulnerability

Priority LOW 31

Missing Authorization vulnerability in WP Happy Coders Posts Like Dislike allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Posts Like Dislike: from n/a through 1.1.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00498 Published 2024-12-13 No fix listed CWE-862
TI-2021-06671 CVE-2021-24379 · GHSA-vww6-xqpq-4v62

Comments Like Dislike < 1.1.4 - Add Like/Dislike Bypass

Priority LOW 26

The Comments Like Dislike WordPress plugin before 1.1.4 allows users to like/dislike posted comments, however does not prevent them from replaying the AJAX request to add a like.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00981 Published 2021-06-21 Fixed in 1.1.4 CWE-863
TI-2023-03040 CVE-2023-3244 · GHSA-5pr3-pwqq-x984

Comments Like Dislike <= 1.2.0 - Missing Authorization to Authenticated (Subscriber+) Plugin Setting Reset

Priority LOW 22

The Comments Like Dislike plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the restore_settings function called via an AJAX action in versions up to, and includ…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00939 Published 2023-08-17 No fix listed CWE-862
Open these records in search →