CVE-2025-5287

CVE-2025-5287 Plugin Likes and Dislikes = 1.0.0 - SQL Injection Non Autenticata Descrizione Il plugin Likes and Dislikes per WordPress è vulnerabile a SQL Injection tramite il parametro 'post' in tutte le versioni fino alla 1.0.0 inclusa, a causa di un escaping insufficiente sul parametro fornito...

CVE-2025-5287

🔥 Plugin WordPress Likes and Dislikes ≤ 1.0.0 - SQL Injection non autenticata 🧠 CVE ID: CVE-2025-5287 Scoperto da: KhaledAlenazi Nxploited Pubblicato il: 27 maggio 2025 📋 Descrizione Il Plugin Likes and Dislikes per WordPress è vulnerabile a SQL Injection tramite il parametro post in tutte le...

WWBN AVideo 跨站请求伪造漏洞

WWBN AVideo is a video platform building system written in PHP, developed by the WWBN team. Versions of WWBN AVideo prior to 29.0 contained a cross-site request forgeing vulnerability. This vulnerability stemmed from multiple AVideo JSON endpoints under the objects/ directory accepting status...

EUVD-2025-17630

Malicious code in bioql PyPI...

WordPress plugin inprosysmedia-likes-dislikes-post 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. WordPress inprosysmedia-likes-dislikes-post plugin suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL...