Vulnerabilities > CVE-2023-3869 - Missing Authorization vulnerability in Gvectors Wpdiscuz

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
gvectors
CWE-862

Summary

The wpDiscuz plugin for WordPress is vulnerable to unauthorized modification of data due to a missing authorization check on the voteOnComment function in versions up to, and including, 7.6.3. This makes it possible for unauthenticated attackers to increase or decrease the rating of a comment.

Vulnerable Configurations

Part Description Count
Application
Gvectors
155

Common Weakness Enumeration (CWE)