CVE-2022-0279

CVE-2022-0279: AnyComment < 0.2.18 - Comment Rating Increase/Decrease via Race Condition

Vendor Unknown
Product AnyComment
Weakness CWE-362
Published February 21, 2022
Last update August 2, 2024

CVSS base score

What the vulnerability does

01Description

The AnyComment WordPress plugin before 0.2.18 is affected by a race condition when liking/disliking a comment/reply, which could allow any authenticated user to quickly raise their rating or lower the rating of other users

Key dates

02Disclosure timeline

February 21, 2022 CVE published
August 2, 2024 Record updated