CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in WP Happy Coders Posts Like Dislike allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Posts Like Dislike: from n/a through 1.1.0.
Explanation of Vulnerability in Simple Terms
Posts Like Dislike through version 1.1.0 lacks proper authorization checks on like/dislike actions. An unauthenticated attacker can submit likes or dislikes on posts without permission, modifying post engagement metrics. The vulnerability requires no user interaction and is exploitable over the network.
What an attacker can do
Submit likes or dislikes on posts without authentication or authorization.
Potential impact on your site
Post like/dislike counts can be manipulated by anyone, compromising engagement metrics and user trust.
Conditions required to exploit
Network access to the WordPress site; no authentication required.
Key dates
External resources
Related vulnerabilities
