Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:anycomment:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductAnycomment (842a6549-52b1-5c1f-9ef2-3150eacbc303)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-0279 vulnerable 2026-06-08 05:39:09.654270 AnyComment < 0.2.18 - Comment Rating Increase/Decrease via Race Condition
The AnyComment WordPress plugin before 0.2.18 is affected by a race condition when liking/disliking a comment/reply, which could allow any authenticated user to quickly raise their rating or lower the rating of other users
Published: 2022-02-21T10:46:12.000Z
Updated: 2024-08-02T23:25:40.247Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0134 vulnerable 2026-06-08 05:39:09.300733 AnyComment < 0.2.18 - Arbitrary HyperComments Import/Revert via CSRF
The AnyComment WordPress plugin before 0.2.18 does not have CSRF checks in the Import and Revert HyperComments features, allowing attackers to make logged in admin perform such actions via a CSRF attack
Published: 2022-02-21T10:45:59.000Z
Updated: 2024-08-02T23:18:41.696Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24838 vulnerable 2026-06-08 05:30:39.330481 AnyComment < 0.3.5 - Open Redirect
The AnyComment WordPress plugin before 0.3.5 has an API endpoint which passes user input via the redirect parameter to the wp_redirect() function without being validated first, leading to an Open Redirect issue, which according to the vendor, is a feature.
Published: 2022-01-17T13:00:27.000Z
Updated: 2024-08-03T19:42:17.311Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.