I Recommend This Security Vulnerabilities and Issues — I Recommend This CVE List

ThemeistI Recommend This

4 matches found

CVE•added 2019/08/16 8:9 p.m.•343 views

CVE-2014-10376

CVE-2014-10376 affects the WordPress plugin i-recommend-this (before version 3.7.3). The vulnerability is a SQL injection in the plugin, allowing potential arbitrary SQL execution with network access and no authentication. CVSS: 3.0 base score 9.8 (CRITICAL) across confidentiality, integrity, and...

9.8CVSS9.9AI score0.01779EPSS

CVE•added 2023/11/12 9:40 p.m.•61 views

CVE-2023-28696

CVE-2023-28696 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin I Recommend This (also listed as Themeist I Recommend This) affecting versions up to 3.9.0. The issue arises from CSRF protection weaknesses in the plugin, enabling unauthorized actions on a user’s account...

8.8CVSS6.3AI score0.00321EPSS

CVE•added 2023/05/16 8:28 a.m.•57 views

CVE-2023-23673

The CVE refers to a Stored XSS in the WordPress plugin “I Recommend This” (Themeist) versions

5.9CVSS4.9AI score0.00392EPSS

CVE•added 2023/04/20 5:31 a.m.•35 views

CVE-2014-125099

Affected software: WordPress plugin “I Recommend This Plugin” (up to 3.7.2). Vulnerability: SQL injection due to an unknown function in dot-irecommendthis.php; attack can be launched remotely. Impact: data disclosure/modification possible; severity per sources is MEDIUM to CRITICAL depending on v...

9.8CVSS8.4AI score0.00723EPSS