Vulnerabilities and Security Researches

AnyComment, CVE-2022-0279

CVE, Research URL: CVE-2022-0279
Home page URL: Security reports for AnyComment
Application: AnyComment
Published on: Feb 21, 2022
Research Description: The AnyComment WordPress plugin before 0.2.18 is affected by a race condition when liking/disliking a comment/reply, which could allow any authenticated user to quickly raise their rating or lower the rating of other users
Affected versions: max 0.2.18.
Status: vulnerable