Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: AnyComment 0.2.18 Clear all filters
TI-2022-00211 CVE-2022-0279 · GHSA-g7w5-4hph-r98m

AnyComment < 0.2.18 - Comment Rating Increase/Decrease via Race Condition

Priority LOW 16

The AnyComment WordPress plugin before 0.2.18 is affected by a race condition when liking/disliking a comment/reply, which could allow any authenticated user to quickly raise their rating or lower the rating of other use…

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00494 Published 2022-02-21 Fixed in 0.2.18 CWE-362
TI-2022-00077 CVE-2022-0134 · GHSA-wh4r-2vqj-7php

AnyComment < 0.2.18 - Arbitrary HyperComments Import/Revert via CSRF

Priority LOW 39

The AnyComment WordPress plugin before 0.2.18 does not have CSRF checks in the Import and Revert HyperComments features, allowing attackers to make logged in admin perform such actions via a CSRF attack

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00645 Published 2022-02-21 Fixed in 0.2.18 CWE-352