Medium
CVE-2026-2358
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 18
Reset filters
Medium
CVE-2026-0909
WP ULike <= 4.8.3.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Log Deletion via 'id' Parameter
Medium
CVE-2024-9648
WP ULike Pro <= 1.9.3 - Unauthenticated Limited Arbitrary File Upload
Medium
CVE-2025-32259
WP ULike <= 4.7.9.1 - Missing Authorization to Unauthenticated Content Spoofing
Medium
CVE-2024-12770
WP ULike <= 4.7.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-22738
WP ULike <= 4.7.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-7879
WP ULike <= 4.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-9649
WP ULike <= 4.7.4 - Cross-Site Request Forgery to Statistic Deletion
Medium
CVE-2024-7878
WP ULike <= 4.7.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6792
WP ULike 4.7.1 - 4.7.2 - Authenticated (Subscriber+) Stored-Cross-Site Scripting
Medium
CVE-2024-6094
WP ULike <= 4.7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-1759
WP ULike <= 4.6.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2024-1797
WP ULike – Most Advanced WordPress Marketing Toolkit <= 4.6.9 - Authenticated (Contributor+) SQL Injection via Shortcodes
Medium
CVE-2024-1572
WP ULike <= 4.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-45640
WP ULike <= 4.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2022-45842
WP ULike <= 4.6.4 - Race Condition
High
CVE-2018-1000511
WP ULike < 3.2 - Missing Authorization
High
CVE-2018-1000508
WP ULike < 3.2 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.