CVE-2025-5287

🔥 WordPress Likes and Dislikes 插件 ≤ 1.0.0 - 未认证 SQL 注入 🧠 CVE ID: CVE-2025-5287 发现者: KhaledAlenazi Nxploited 发布时间: 2025年5月27日 📋 描述 WordPress 的 Likes and Dislikes 插件 在所有版本 直至 1.0.0（含） 中，通过 post 参数存在 SQL 注入 漏洞。 由于 转义不足 且缺少预处理语句，未认证的攻击者可以将原始 SQL 注入后端查询，导致 数据泄露或篡改 。 🧬 技术细节 脆弱参数: post 漏洞类型: SQL...

CVE-2025-5287

CVE-2025-5287 Likes and Dislikes 插件 = 5.0.12 AND time-based blind query SLEEP Payload: action=mylikesdislikesaction&post=1 AND SELECT 7318 FROM SELECTSLEEP5OIPg&state=dislike ---...

WWBN AVideo 跨站请求伪造漏洞

WWBN AVideo is a video platform building system written in PHP, developed by the WWBN team. Versions of WWBN AVideo prior to 29.0 contained a cross-site request forgeing vulnerability. This vulnerability stemmed from multiple AVideo JSON endpoints under the objects/ directory accepting status...

EUVD-2025-17630

Malicious code in bioql PyPI...

WordPress plugin inprosysmedia-likes-dislikes-post 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. WordPress inprosysmedia-likes-dislikes-post plugin suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL...