1728 matches found
CVE-2025-12404
CVE-2025-12404 affects the WordPress Like-it plugin, specifically versions up to 2.2. The vulnerability arises from missing or incorrect nonce validation in the likeit_conf() function, allowing unauthenticated attackers to update settings and inject malicious web scripts via forged requests that ...
EUVD-2025-197945
The Like-it plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the likeitconf function. This makes it possible for unauthenticated attackers to update settings and inject malicious web...
CVE-2025-12404 Like-it <= 2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The Like-it plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the likeitconf function. This makes it possible for unauthenticated attackers to update settings and inject malicious web...
PT-2025-47256
Name of the Vulnerable Software and Affected Versions Like-it plugin for WordPress versions prior to 2.3 Description The Like-it plugin for WordPress is susceptible to Cross-Site Request Forgery CSRF. This is caused by insufficient or incorrect nonce validation within the likeit conf function. An...
WordPress plugin Like-it 跨站请求伪造漏洞
WordPress Like-it plugin is an extension to add like-it functionality to WordPress blogs, allowing users to perform like-it operations on posts or comments. The WordPress Like-it plugin suffers from a cross-site request forgery vulnerability, which arises from a web application that does not...
WordPress Like-it plugin <= 2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin Like-it versions = 2.2...
Over 67,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack
Cybersecurity researchers are calling attention to a large-scale spam campaign that has flooded the npm registry with thousands of fake packages since early 2024 as part of a likely financially motivated effort. "The packages were systematically published over an extended period, flooding the npm...
Like Tea SQL注入漏洞
Like Tea is a multi-store tea drinking applet open source by comeasy. Like Tea version 1.0.0 SQL injection vulnerability exists , the vulnerability stems from the file laravel/app/Http/Controllers/Front/StoreController.php in the list function of the lng/lat parameter is not handled properly ,...
MAL-2025-160631 Malicious code in modirai-igafo-jagagg (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bee84eca96aa6db47fbe5a6606d22a59739a8dbc6428a559425fada47175d0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in balanced_sparrow_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e24711d3d59eeac4af2ca568a0fb37438fe58d2144d08891db6a996185274bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74490
Malicious code in likescorpionsilver-76 npm...
Malicious code in like_bonobo_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3a4d7620e2971b687a7ebbf4bad24b5c7755fa15b49b2e4b080e10c891666d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-78899
Malicious code in likebonoboz3n npm...
EUVD-2025-78898
Malicious code in likelionz3n npm...
EUVD-2025-81380
Malicious code in likecaterpillar0xrequest npm...
EUVD-2025-63304
Malicious code in likefalconz3n npm...
EUVD-2025-63303
Malicious code in likegoosez3n npm...
EUVD-2025-85030
Malicious code in likeearwigz3n npm...