Skip to content
Noroxi

wpulike records

7 published records for vendor wpulike.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
42.9%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 24
  3. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

7 records
  • CVE-2024-1797
    35Monitor

    WP ULike – Most Advanced WordPress Marketing Toolkit <= 4.6.9 - Authenticated (Contributor+) SQL Injection via Shortcodes

    HighCVSS 8.8No exploitEPSS 1%

    wpulike · wp ulikeMay 2, 2024

  • CVE-2018-1000511
    30Monitor

    WP ULike version 2.8.1, 3.1 contains a Incorrect Access Control vulnerability in AJAX that can result in allows anybody to delete any row in

    HighCVSS 7.5No exploitEPSS 1%

    wpulike · ulikeJun 26, 2018

  • CVE-2024-1572
    21Monitor

    WP ULike <= 4.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    wpulike · wp ulikeMay 2, 2024

  • CVE-2024-1759
    21Monitor

    WP ULike <= 4.6.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    wpulike · wp ulikeMay 2, 2024

  • CVE-2018-1000508
    19Monitor

    WP ULike version 2.8.1, 3.1 contains a Cross Site Scripting (XSS) vulnerability in Settings screen that can result in allows unauthorised us

    MediumCVSS 4.8No exploitEPSS 1%

    wpulike · ulikeJun 26, 2018

  • CVE-2025-22738
    19Monitor

    WordPress WP ULike plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 0%

    wpulike · wp ulikeJan 15, 2025

  • CVE-2024-9649
    17Monitor

    WP ULike <= 4.7.4 - Cross-Site Request Forgery to Statistic Deletion

    MediumCVSS 4.3No exploitEPSS 0%

    wpulike · wp ulikeOct 15, 2024