Vulnerabilities

TI-2020-07058 CVE-2020-8799 · GHSA-fg28-v9fx-wgww

A Stored XSS vulnerability has been found in the administration page of the WTI Like Post…

LOW 23

A Stored XSS vulnerability has been found in the administration page of the WTI Like Post plugin through 1.4.5 for WordPress.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00741 Published 2020-05-05 No fix listed CWE-79

TI-2015-07843 CVE-2015-9466 · GHSA-w9rj-wj7h-2q68

The wti-like-post plugin before 1.4.3 for WordPress has WtiLikePostProcessVote SQL…

MEDIUM 47

The wti-like-post plugin before 1.4.3 for WordPress has WtiLikePostProcessVote SQL injection via the HTTP_CLIENT_IP, HTTP_X_FORWARDED_FOR, HTTP_X_FORWARDED, HTTP_FORWARDED_FOR, or HTTP_FORWARDED variable.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0239 Published 2019-10-10 No fix listed CWE-89

Vulnerabilities

Filters

A Stored XSS vulnerability has been found in the administration page of the WTI Like Post…

The wti-like-post plugin before 1.4.3 for WordPress has WtiLikePostProcessVote SQL…