Extension WordPress
Vulnérabilités Comments Like Dislike
Cette page rassemble les failles publiées pour Comments Like Dislike, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Comments Like Dislike
3 fiches
Comments Like Dislike <= 1.2.2 – IP Spoofing
The Comments Like Dislike plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 1.2.2 due to use of user-supplied HTTP headers as a primary method for IP retrieval. This makes it…
*-1.2.2
1.2.3
12/02/2024
Comments Like Dislike <= 1.2.0 – Missing Authorization to Authenticated (Subscriber+) Plugin Setting Reset
The Comments Like Dislike plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the restore_settings function called via an AJAX action in versions up to, and including, 1.2.0. This makes…
*-1.2.0
1.2.1
16/08/2023
Comments Like Dislike <= 1.1.2 – Add Like/Dislike Bypass
The Comments Like Dislike WordPress plugin before 1.1.4 allows users to like/dislike posted comments, however does not prevent them from replaying the AJAX request to add a like. This allows any user (even unauthenticated) to add unlimited like/dislike…
[*, 1.1.4)
1.1.4
07/06/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.