Extension WordPress
Vulnérabilités WTI Like Post
Cette page rassemble les failles publiées pour WTI Like Post, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WTI Like Post
3 fiches
WTI Like Post <= 1.4.6 – IP Spoofing
The WTI Like Post plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 1.4.6 due to insufficient IP address validation and/or use of user-supplied HTTP headers as a primary method for…
*-1.4.6
Non indiqué
29/04/2024
WTI Like Post <= 1.4.5 – Stored Cross-Site Scripting
A Stored XSS vulnerability has been found in the administration page of the WTI Like Post plugin through 1.4.5 for WordPress. Once the administrator has submitted the data, the script stored is executed for all the users visiting…
[*, 1.4.6)
1.4.6
02/05/2020
WTI Like Post < 1.4.3 – SQL Injection
The WTI Like Post plugin before 1.4.3 for WordPress has WtiLikePostProcessVote SQL injection via the HTTP_CLIENT_IP, HTTP_X_FORWARDED_FOR, HTTP_X_FORWARDED, HTTP_FORWARDED_FOR, or HTTP_FORWARDED headers.
[*, 1.4.3)
1.4.3
05/07/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.