CVE-2022-45842 WordPress WP ULike Plugin <= 4.6.4 is vulnerable to Race Condition vulnerability
Unauthenticated attackers can exploit a race condition to arbitrarily increase or decrease rating scores in the WP ULike plugin.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-45842?
CVE-2022-45842 is a medium-severity vulnerability in TechnoWich WP ULike (WordPress plugin), published on 30 Nov 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Unauth. Race Condition vulnerability in WP ULike Plugin <= 4.6.4 on WordPress allows attackers to increase/decrease rating scores.
Weakness: CWE-367
Which versions are affected by CVE-2022-45842?
It affects 1 product.
Products include Technowich Wp Ulike.
How do I fix CVE-2022-45842?
No fix has been published for CVE-2022-45842 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-45842 being exploited?
There is no known exploitation of CVE-2022-45842 in the wild and no public exploit code.
Other vulnerabilities in TechnoWich WP ULike (WordPress plugin)
- CVE-2023-45640 WordPress WP ULike Plugin <= 4.6.8 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-12770 WP ULike < 4.7.6 - Admin+ Stored XSS
- CVE-2024-7879 WP ULike < 4.7.5 - Admin+ Stored XSS via Widgets
- CVE-2024-7878 WP ULike < 4.7.4 - Admin+ Stored XSS
- CVE-2024-6094 WP ULike < 4.7.1 - Admin+ Stored XSS
Sources
Also known as GHSA-8p7h-769g-x7mf.