CVE-2025-4840

CVE-2025-4840 लाइक्स और डिसलाइक्स प्लगइन = 1.0.0 - अप्रमाणित SQL इंजेक्शन विवरण लाइक्स और डिसलाइक्स प्लगइन WordPress के लिए एक प्लगइन है जो संस्करण 1.0.0 तक और शामिल सभी संस्करणों में 'post' पैरामीटर के माध्यम से SQL इंजेक्शन के प्रति संवेदनशील है। इसका कारण उपयोगकर्ता द्वारा प्रदत्त पैरामीटर पर...

CVE-2025-5287

CVE-2025-5287 PoC अप्रमाणित SQL इंजेक्शन शोषण WordPress Likes and Dislikes Plugin ≤ 1.0.0 के लिए 📖 विवरण यह Python स्क्रिप्ट CVE-2025-5287 के लिए एक प्रमाण-अवधारणा PoC शोषण है, जो WordPress Likes and Dislikes Plugin ≤ 1.0.0 में एक कमजोरी को लक्षित करता है। यह कमजोरी अप्रमाणित हमलावरों को...

WordPress Likes and Dislikes Plugin plugin <= 1.0.0 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin Likes and Dislikes versions = 1.0.0...

VulnCheck KEV: CVE-2025-5287

The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

CVE-2025-4840 Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection

The inprosysmedia-likes-dislikes-post WordPress plugin through 1.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2025-5287 Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection

The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

CVE-2025-5287

The CVE-2025-5287 vulnerability affects the WordPress plugin Likes and Dislikes (≤ 1.0.0). Root cause: insufficient escaping / lack of prepared statements in the SQL queries used by the my_likes_dislikes_action/ajax flow, allowing unauthenticated SQL injection via the post parameter. Impact: atta...

WordPress plugin Likes and Dislikes Plugin SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

WordPress Likes and Dislikes 1.0.0 SQL Injection

WordPress Likes and Dislikes plugin versions 1.0.0 and below suffer from an unauthenticated remote SQL injection vulnerability...

PT-2025-23072 · Unknown · Likes/Dislikes Plugin

Name of the Vulnerable Software and Affected Versions: Likes and Dislikes Plugin versions up to, and including, 1.0.0 Description: The issue is related to SQL Injection via the post parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the...

CVE-2025-5287: Improper Neutralization of Special Elements used in an SQL Command

The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...