113 matches found
WordPress Pro Like Button plugin < 2.0 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin Pro Like Button versions 2.0...
CVE-2026-89296
The Pro Like Button WordPress plugin before 2.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...
CVE-2026-89296 Pro Like Button < 2.0 - Unauthenticated SQLi via 'postid' Parameter
The Pro Like Button WordPress plugin before 2.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...
CVE-2026-89296 Pro Like Button < 2.0 - Unauthenticated SQLi via 'postid' Parameter
The Pro Like Button WordPress plugin before 2.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...
EUVD-2026-90514
The Pro Like Button WordPress plugin before 2.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...
CVE-2026-89296
The Pro Like Button WordPress plugin, in versions before 2.0 , is vulnerable to SQL injection due to insufficient sanitization and escaping of a parameter before it is used in a SQL query. Specifically, the 'postid' parameter is identified as the vector. This flaw allows unauthenticated users to ...
PT-2026-103704
The Pro Like Button WordPress plugin before 2.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...
CVE-2026-89296: Improper Neutralization of Special Elements used in an SQL Command
The Pro Like Button WordPress plugin before 2.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...
CVE-2026-78285
Subscriber SQL Injection in Like Button Rating = 2.6.61 versions...
CVE-2026-78285 WordPress Like Button Rating plugin <= 2.6.61 - SQL Injection vulnerability
Subscriber SQL Injection in Like Button Rating = 2.6.61 versions...
CVE-2026-78285 WordPress Like Button Rating plugin <= 2.6.61 - SQL Injection vulnerability
Subscriber SQL Injection in Like Button Rating = 2.6.61 versions...
EUVD-2026-66942
Subscriber SQL Injection in Like Button Rating = 2.6.61 versions...
CVE-2026-78285
WordPress Like Button Rating plugin (versions
PT-2026-82461
Subscriber SQL Injection in Like Button Rating = 2.6.61 versions...
CVE-2026-78285: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in Like Button Rating = 2.6.61 versions...
WordPress Like Button Rating plugin <= 2.6.61 - SQL Injection vulnerability
SQL Injection vulnerability discovered by daroo in WordPress Plugin Like Button Rating versions = 2.6.61...
CVE-2022-0745
The Like Button Rating WordPress plugin before 2.6.45 allows any logged-in user, such as subscriber, to send arbitrary e-mails to any recipient, with any subject and body...
CVE-2023-40199
Cross-Site Request Forgery CSRF vulnerability in CRUDLab WP Like Button plugin = 1.7.0 versions...