Read the docs

erumfaham

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

erumfaham records in CISA KEV

No erumfaham vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Likes And Dislikes 1 record HIGH

Records

2 records

TI-2025-04335 CVE-2025-4840 · GHSA-gccm-j8cw-3hcg

Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection

Priority HIGH 72

The inprosysmedia-likes-dislikes-post WordPress plugin through 1.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00578 Published 2025-06-10 No fix listed CWE-89
TI-2025-04750 CVE-2025-5287 · GHSA-2q5m-qpc5-76wp

Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection

Priority MEDIUM 43

The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied parameter and lack…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02381 Published 2025-05-28 No fix listed CWE-89
Open these records in search →