Skip to content
OpenAdvisories

Vendor

happy-coders

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2023-3244 Public exploit

    Comments Like Dislike <= 1.2.0 - Missing Authorization to Authenticated (Subscriber+) Plugin Setting Reset

    The Comments Like Dislike plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the restore_settings function called via an AJAX action in versions up to, and including, 1.2.0. This makes it possible for …