Vulnerabilities

TI-2024-22387 CVE-2024-33917 · GHSA-c79h-9pj9-mgqp

WordPress WTI Like Post plugin <= 1.4.6 - IP Restriction Bypass Vulnerability vulnerability

LOW 30

Authentication Bypass by Spoofing vulnerability in webtechideas WTI Like Post allows Functionality Bypass.This issue affects WTI Like Post: from n/a through 1.4.6.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00414 Published 2024-05-17 No fix listed CWE-290

TI-2020-07058 CVE-2020-8799 · GHSA-fg28-v9fx-wgww

A Stored XSS vulnerability has been found in the administration page of the WTI Like Post…

LOW 23

A Stored XSS vulnerability has been found in the administration page of the WTI Like Post plugin through 1.4.5 for WordPress.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00741 Published 2020-05-05 No fix listed CWE-79

TI-2015-07843 CVE-2015-9466 · GHSA-w9rj-wj7h-2q68

The wti-like-post plugin before 1.4.3 for WordPress has WtiLikePostProcessVote SQL…

MEDIUM 47

The wti-like-post plugin before 1.4.3 for WordPress has WtiLikePostProcessVote SQL injection via the HTTP_CLIENT_IP, HTTP_X_FORWARDED_FOR, HTTP_X_FORWARDED, HTTP_FORWARDED_FOR, or HTTP_FORWARDED variable.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0239 Published 2019-10-10 No fix listed CWE-89

Vulnerabilities

Filters

WordPress WTI Like Post plugin <= 1.4.6 - IP Restriction Bypass Vulnerability vulnerability

A Stored XSS vulnerability has been found in the administration page of the WTI Like Post…

The wti-like-post plugin before 1.4.3 for WordPress has WtiLikePostProcessVote SQL…