CVE-2023-3244

Summary

CVE-2023-3244 is a vulnerability affecting the Comments Like Dislike plugin for WordPress. This issue allows authenticated attackers, even those with minimal permissions like a subscriber, to unauthorizedly modify plugin settings. The vulnerability stems from a missing capability check in the restore_settings function, which can be triggered via an AJAX action. Despite reporting this issue to the plugin team 30 days ago and attempting to contact the developer, the vulnerability remains unpatched.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.