CVE-2022-0279CWE-362
AnyComment < 0.2.18 - Comment Rating Increase/Decrease via Race Condition
published February 21, 2022
What it is
The AnyComment WordPress plugin before 0.2.18 is affected by a race condition when liking/disliking a comment/reply, which could allow any authenticated user to quickly raise their rating or lower the rating of other users
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00494 · 41.5th percentile
- Weakness
- CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
- Published
- 2022-02-21T10:46Z
EPSS history
Timeline