CVE-2025-4840

CVE-2025-4840 Likes and Dislikes プラグイン = 1.0.0 - 認証なしSQLインジェクション 説明 WordPress用Likes and Dislikesプラグインは、バージョン1.0.0までの全バージョンにおいて、'post'パラメータを介したSQLインジェクションに対して脆弱です。これは、ユーザー提供のパラメータに対するエスケープ処理の不足と、既存のSQLクエリに対する適切な準備の欠如に起因します。これにより、認証されていない攻撃者が既存のクエリに追加のSQLクエリを追加でき、データベースから機密情報を抽出するために悪用される可能性があります。 ...

VulnCheck KEV: CVE-2025-5287

The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

CVE-2025-4840 Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection

The inprosysmedia-likes-dislikes-post WordPress plugin through 1.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2025-5287

The CVE-2025-5287 vulnerability affects the WordPress plugin Likes and Dislikes (≤ 1.0.0). Root cause: insufficient escaping / lack of prepared statements in the SQL queries used by the my_likes_dislikes_action/ajax flow, allowing unauthenticated SQL injection via the post parameter. Impact: atta...

CVE-2025-5287 Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection

The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

PT-2025-23072 · Unknown · Likes/Dislikes Plugin

Name of the Vulnerable Software and Affected Versions: Likes and Dislikes Plugin versions up to, and including, 1.0.0 Description: The issue is related to SQL Injection via the post parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the...