PT-2022-27655 · WordPress · Wp Ulike Plugin

Minhtuanact · Published 2022-11-30 · Updated 2024-09-16 · CVE-2022-45842

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions WP ULike Plugin versions <= 4.6.4

Description The issue allows attackers to manipulate rating scores by exploiting a race condition vulnerability. This can result in increased or decreased rating scores.

Recommendations For WP ULike Plugin versions <= 4.6.4, update to a version greater than 4.6.4 to resolve the issue. At the moment, there is no information about other mitigation measures for this specific vulnerability.

Fix

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2022-45842

Affected Products

Wp Ulike Plugin

References · 4

• https://osv.dev/vulnerability/CVE-2022-45842 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-45842 · Security Note
• https://patchstack.com/database/vulnerability/wp-ulike/wordpress-wp-ulike-plugin-4-6-3-race-condition-vulnerability?_s_id=cve · Note
• https://t.me/cibsecurity/53722 · Telegram Post