Wpulike

Ulike

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.8

CVE-2018-1000508

Exploit
  • EPSS 0.21%
  • Published 26.06.2018 16:29:00
  • Last modified 21.11.2024 03:40:04

WP ULike version 2.8.1, 3.1 contains a Cross Site Scripting (XSS) vulnerability in Settings screen that can result in allows unauthorised users to do almost anything an admin can. This attack appear to be exploitable via Admin must visit logs page. T...

7.5

CVE-2018-1000511

Exploit
  • EPSS 0.21%
  • Published 26.06.2018 16:29:00
  • Last modified 21.11.2024 03:40:05

WP ULike version 2.8.1, 3.1 contains a Incorrect Access Control vulnerability in AJAX that can result in allows anybody to delete any row in certain tables. This attack appear to be exploitable via Attacker must make AJAX request. This vulnerability ...