Vulnerabilities

TI-2023-13213 CVE-2023-28696 · GHSA-54v8-3w5h-ggf6

WordPress I Recommend This Plugin <= 3.9.0 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Harish Chouhan, Themeist I Recommend This allows Cross Site Request Forgery.This issue affects I Recommend This: from n/a through 3.9.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00321 Published 2023-11-12 No fix listed CWE-352

TI-2023-09487 CVE-2023-23673 · GHSA-fgxr-fc5q-2355

WordPress I Recommend This Plugin <= 3.8.3 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Harish Chouhan, Themeist I Recommend This plugin <= 3.8.3 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00392 Published 2023-05-16 No fix listed CWE-79

TI-2014-08399 CVE-2014-125099 · GHSA-f6j6-4qcx-fq7v

I Recommend This Plugin dot-irecommendthis.php sql injection

MEDIUM 43

A vulnerability has been found in I Recommend This Plugin up to 3.7.2 on WordPress and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00723 Published 2023-04-20 No fix listed CWE-89

TI-2014-08238 CVE-2014-10376 · GHSA-293j-x829-fj24

The i-recommend-this plugin before 3.7.3 for WordPress has SQL injection.

MEDIUM 46

The i-recommend-this plugin before 3.7.3 for WordPress has SQL injection.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01779 Published 2019-08-16 No fix listed CWE-89

Vulnerabilities

Filters

WordPress I Recommend This Plugin <= 3.9.0 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress I Recommend This Plugin <= 3.8.3 is vulnerable to Cross Site Scripting (XSS)

I Recommend This Plugin dot-irecommendthis.php sql injection

The i-recommend-this plugin before 3.7.3 for WordPress has SQL injection.