EIP-2026-106081
PRE-CVEcomments-like-dislike < 1.2.0 - Authenticated (Subscriber+) Plugin Setting Reset
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-106081. PoCs published by Diaa Hanna.
AI-analyzed exploit summary This exploit demonstrates an unauthorized settings reset vulnerability in the Comments Like Dislike WordPress plugin (CVE-2023-3244) by leveraging a missing capability check in the restore_settings function. It authenticates as a low-privilege user and triggers the vulnerable AJAX action to reset plugin settings.
Description
comments-like-dislike < 1.2.0 - Authenticated (Subscriber+) Plugin Setting Reset
Exploits (1)
This exploit demonstrates an unauthorized settings reset vulnerability in the Comments Like Dislike WordPress plugin (CVE-2023-3244) by leveraging a missing capability check in the restore_settings function. It authenticates as a low-privilege user and triggers the vulnerable AJAX action to reset plugin settings.