Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Bologer Clear all filters
TI-2022-00211 CVE-2022-0279 · GHSA-g7w5-4hph-r98m

AnyComment < 0.2.18 - Comment Rating Increase/Decrease via Race Condition

Priority LOW 16

The AnyComment WordPress plugin before 0.2.18 is affected by a race condition when liking/disliking a comment/reply, which could allow any authenticated user to quickly raise their rating or lower the rating of other use…

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00494 Published 2022-02-21 Fixed in 0.2.18 CWE-362
TI-2022-00077 CVE-2022-0134 · GHSA-wh4r-2vqj-7php

AnyComment < 0.2.18 - Arbitrary HyperComments Import/Revert via CSRF

Priority LOW 39

The AnyComment WordPress plugin before 0.2.18 does not have CSRF checks in the Import and Revert HyperComments features, allowing attackers to make logged in admin perform such actions via a CSRF attack

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00645 Published 2022-02-21 Fixed in 0.2.18 CWE-352
TI-2021-07120 CVE-2021-24838 · GHSA-3cq7-3xmj-m7r2

AnyComment < 0.3.5 - Open Redirect

Priority LOW 32

The AnyComment WordPress plugin before 0.3.5 has an API endpoint which passes user input via the redirect parameter to the wp_redirect() function without being validated first, leading to an Open Redirect issue, which ac…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02208 Published 2022-01-17 Fixed in 0.3.5 CWE-601