Vulnerabilities

TI-2018-15911 CVE-2018-1000511 · GHSA-m495-pg93-8h47

WP ULike version 2.8.1, 3.1 contains a Incorrect Access Control vulnerability in AJAX…

LOW 34

WP ULike version 2.8.1, 3.1 contains a Incorrect Access Control vulnerability in AJAX that can result in allows anybody to delete any row in certain tables.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00823 Published 2018-06-26 No fix listed CWE-732

TI-2018-15908 CVE-2018-1000508 · GHSA-7wmw-4342-6vhf

WP ULike version 2.8.1, 3.1 contains a Cross Site Scripting (XSS) vulnerability in…

LOW 23

WP ULike version 2.8.1, 3.1 contains a Cross Site Scripting (XSS) vulnerability in Settings screen that can result in allows unauthorised users to do almost anything an admin can.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00587 Published 2018-06-26 No fix listed CWE-79

Vulnerabilities

Filters

WP ULike version 2.8.1, 3.1 contains a Incorrect Access Control vulnerability in AJAX…

WP ULike version 2.8.1, 3.1 contains a Cross Site Scripting (XSS) vulnerability in…