Home / os / palm

WordPress Comments Like Dislike 1.2.0 Missing Authorization

Posted on 27 February 2024

WordPress Comments Like Dislike plugin versions 1.2.0 and below suffer from a missing capability check on the restore_settings function that allows an attacker to reset the plugin's settings.

 

TOP