Vulnerabilities > Wphappycoders

DATE CVE VULNERABILITY TITLE RISK
2023-08-17 CVE-2023-3244 Unspecified vulnerability in Wphappycoders Comments Like Dislike
The Comments Like Dislike plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the restore_settings function called via an AJAX action in versions up to, and including, 1.1.9.
network
low complexity
wphappycoders
4.3
2021-06-21 CVE-2021-24379 Incorrect Authorization vulnerability in Wphappycoders Comments Like Dislike
The Comments Like Dislike WordPress plugin before 1.1.4 allows users to like/dislike posted comments, however does not prevent them from replaying the AJAX request to add a like.
network
low complexity
wphappycoders CWE-863
5.0