Vulnerabilities > Wpulike > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-10-16 | CVE-2024-9649 | Cross-Site Request Forgery (CSRF) vulnerability in Wpulike WP Ulike The WP ULike – The Ultimate Engagement Toolkit for Websites plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.7.4. | 4.3 |
| 2018-06-26 | CVE-2018-1000508 | Cross-site Scripting vulnerability in Wpulike Ulike 2.8.1/3.1 WP ULike version 2.8.1, 3.1 contains a Cross Site Scripting (XSS) vulnerability in Settings screen that can result in allows unauthorised users to do almost anything an admin can. | 4.8 |