Filtered by vendor Technowich Subscriptions
Filtered by product Wp Ulike Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-6094 1 Technowich 1 Wp Ulike 2024-11-21 4.8 Medium
The WP ULike WordPress plugin before 4.7.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVE-2023-45640 1 Technowich 1 Wp Ulike 2024-11-21 6.5 Medium
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TechnoWich WP ULike – Most Advanced WordPress Marketing Toolkit plugin <= 4.6.8 versions.
CVE-2024-7878 2 Technowich, Wpulike 2 Wp Ulike, Wp Ulike 2024-10-02 4.8 Medium
The WP ULike WordPress plugin before 4.7.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).