The WP ULike plugin for WordPress has a security vulnerability that allows attackers with high-level permissions to insert harmful code into pages. This can happen if the plugin’s settings are not properly sanitized and escaped. The vulnerability affects all versions up to 4.7.2 and only applies to multi-site installations or ones with disabled unfiltered_html.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
