This vulnerability (CVE-2024-25906) in the WP Happy Coders Comments Like Dislike plugin allows an attacker with low privileges to bypass authentication mechanisms by spoofing, leading to unauthorized access to certain plugin functionalities. The affected versions include all versions up to 1.2.2. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity and no user interaction required, but limited impact confined to integrity with no confidentiality or availability impact. No official patch or remediation level has been published, and no exploits are currently known.

The vulnerability enables an attacker to bypass authentication controls, potentially allowing unauthorized manipulation of plugin functionality. The impact is limited to integrity as per the CVSS vector, with no direct confidentiality or availability consequences reported. Since no known exploits are in the wild, the immediate risk appears moderate but could increase if exploitation techniques emerge.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from WP Happy Coders and consider restricting access to the affected plugin's functionality where possible. No vendor advisory or official fix is currently available.