Skip to content
OpenAdvisories
Unscored CVE-2022-0279 EUVD-2022-15453GHSA-g7w5-4hph-r98m

AnyComment < 0.2.18 - Comment Rating Increase/Decrease via Race Condition

Published Feb 21, 2022 · Updated Aug 2, 2024 · Assigned by WPScan

Description

The AnyComment WordPress plugin before 0.2.18 is affected by a race condition when liking/disliking a comment/reply, which could allow any authenticated user to quickly raise their rating or lower the rating of other users

Affected products

VendorProductAffectedFixed
— AnyComment 0.2.18 – < 0.2.18 0.2.18

References