Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: WP Happy Coders Clear all filters
TI-2023-22242 CVE-2023-41849 · GHSA-2jpx-8fpp-54rx

WordPress Posts Like Dislike plugin <= 1.1.0 - Broken Access Control vulnerability

Priority LOW 31

Missing Authorization vulnerability in WP Happy Coders Posts Like Dislike allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Posts Like Dislike: from n/a through 1.1.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00498 Published 2024-12-13 No fix listed CWE-862
TI-2023-03040 CVE-2023-3244 · GHSA-5pr3-pwqq-x984

Comments Like Dislike <= 1.2.0 - Missing Authorization to Authenticated (Subscriber+) Plugin Setting Reset

Priority LOW 22

The Comments Like Dislike plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the restore_settings function called via an AJAX action in versions up to, and includ…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00939 Published 2023-08-17 No fix listed CWE-862
TI-2021-06671 CVE-2021-24379 · GHSA-vww6-xqpq-4v62

Comments Like Dislike < 1.1.4 - Add Like/Dislike Bypass

Priority LOW 26

The Comments Like Dislike WordPress plugin before 1.1.4 allows users to like/dislike posted comments, however does not prevent them from replaying the AJAX request to add a like.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00981 Published 2021-06-21 Fixed in 1.1.4 CWE-863