The WP ULike WordPress plugin before 4.7.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_h…
CVSS 3.1MEDIUM 4.8·Network·High privileges·User interaction·EPSS 0.00355·Published 2025-05-15·Fixed in 4.7.6CWE-79
The WP ULike WordPress plugin before 4.7.5 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is di…
CVSS 3.1MEDIUM 4.8·Network·High privileges·User interaction·EPSS 0.0033·Published 2024-11-06·Fixed in 4.7.5CWE-79
The WP ULike WordPress plugin before 4.7.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_h…
CVSS 3.1MEDIUM 4.8·Network·High privileges·User interaction·EPSS 0.00396·Published 2024-09-25·Fixed in 4.7.4CWE-79
The WP ULike WordPress plugin before 4.7.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_h…
CVSS 3.1MEDIUM 4.8·Network·High privileges·User interaction·EPSS 0.00397·Published 2024-07-24·Fixed in 4.7.1CWE-79