CVE-2015-9466

CRITICO 9.8CVE-2015-9466 · Published 10/10/2019 · updated 17/06/2026

In breve

CVE-2015-9466 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda wti like post (webtechideas).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.4%, superiore al 84.0% delle vulnerabilità.
Correzione: aggiornare a 1.4.3 o successiva.

Package	Affected versions	Patched versions
wti like post webtechideas	`< 1.4.3`	`1.4.3`

Description

The wti-like-post plugin before 1.4.3 for WordPress has WtiLikePostProcessVote SQL injection via the HTTP_CLIENT_IP, HTTP_X_FORWARDED_FOR, HTTP_X_FORWARDED, HTTP_FORWARDED_FOR, or HTTP_FORWARDED variable.

References

cinu.pl/research/wp-plugins/mail_576345187f5867ec8921b12de5884fb1.html · Exploit
wordpress.org/plugins/wti-like-post · Product
wpvulndb.com/vulnerabilities/8318 · Third Party Advisory

Altre vulnerabilità di wti like post

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free