2 matches found
CVE-2024-1797: Improper Neutralization of Special Elements used in an SQL Command
The WP ULike – Most Advanced WordPress Marketing Toolkit plugin for WordPress is vulnerable to SQL Injection via the 'status' and 'id' attributes of the 'wpulikecounter' and 'wpulike' shortcodes in all versions up to, and including, 4.6.9 due to insufficient escaping on the user supplied paramete...
8.8CVSS5.7AI score0.0056EPSS
SaveExploits0References1
WordPress plugin WP ULike 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
8.8CVSS7.6AI score0.0056EPSS
SaveExploits0References3
20