CyberRota Analysis
AI-GeneratedThe WP Delicious WordPress plugin prior to version 1.10.2 is vulnerable due to a lack of authorization checks on specific AJAX actions, enabling unauthenticated users to alter post metadata, such as like counters, on any post. This could lead to inflated metrics and uncontrolled growth of stored data, potentially affecting the integrity of content and user engagement statistics. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate these risks.
Original NVD Description
The WP Delicious WordPress plugin before 1.10.2 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to modify limited post metadata (a like counter and an associated identifier list) on arbitrary posts, including inflating the counter and growing the stored metadata without bound.