CVE-2024-12770
Published May 15, 2025The WP ULike WordPress plugin before 4.7.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Sc…
Vendor/product archive
technowich / wp_ulike CVEs
Beta · best-effort7 CVEs tagged to technowich / wp_ulike — 0 Critical, 0 High, 6 Medium, 1 Low, 0 Unrated.
CVE-2024-7879
Published Nov 6, 2024The WP ULike WordPress plugin before 4.7.5 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripti…
CVE-2024-7878
Published Sep 25, 2024The WP ULike WordPress plugin before 4.7.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Sc…
CVE-2024-6792
Published Sep 6, 2024The WP ULike WordPress plugin before 4.7.2.1 does not properly sanitize user display names when rendering on a public page.
CVE-2024-6094
Published Jul 24, 2024The WP ULike WordPress plugin before 4.7.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Sc…
CVE-2023-45640
Published Oct 25, 2023Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TechnoWich WP ULike – Most Advanced WordPress Marketing Toolkit plugin <= 4.6.8 versions.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2022-45842
Published Nov 30, 2022Unauth. Race Condition vulnerability in WP ULike Plugin <= 4.6.4 on WordPress allows attackers to increase/decrease rating scores.
Showing 1-7 of 7 CVEsPage 1 of 1